IND-3870 enabling dependabot

Author: KaushikiAnand

.github/dependabot.yml

@@ -0,0 +1,36 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+    commit-message:
+      prefix: "[chore] : "
+    groups:
+      actions:
+        patterns:
+          - "*"
+
+  - package-ecosystem: "gomod"
+    directories:
+      - "/"
+      - "/arc"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+    commit-message:
+      prefix: "[chore] : "
+    groups:
+      go:
+        patterns:
+          - "*"
+        applies-to: "version-updates"
+      go-security:
+        patterns:
+          - "*"
+        applies-to: "security-updates"

.go-version

@@ -1 +1 @@
-1.19
+1.23

.golangci.yml

@@ -6,10 +6,10 @@ linters:
   disable-all: true
   enable:
     - revive
-    - megacheck
+    - staticcheck
     - govet
     - unconvert
-    - gas
+    - gosec
     - gocyclo
     - dupl
     - misspell
@@ -18,7 +18,7 @@ linters:
     - typecheck
     - ineffassign
     # - stylecheck
-    - exportloopref
+    - copyloopvar
     - gocritic
     - nakedret
     - gosimple

CHANGELOG.md

@@ -0,0 +1,9 @@
+## Unreleased
+
+### Improvements
+
+### Changes
+
+### Fixed
+
+### Security

expirable/expirable_lru_test.go

@@ -300,7 +300,6 @@ func TestLRUWithPurgeEnforcedBySize(t *testing.T) {
 	lc := NewLRU[string, string](10, nil, time.Hour)
 
 	for i := 0; i < 100; i++ {
-		i := i
 		lc.Add(fmt.Sprintf("key%d", i), fmt.Sprintf("val%d", i))
 		v, ok := lc.Get(fmt.Sprintf("key%d", i))
 		if v != fmt.Sprintf("val%d", i) {

go.mod

@@ -1,3 +1,3 @@
 module github.com/hashicorp/golang-lru/v2
 
-go 1.19
+go 1.23