Review and merge dependabot PRs

Area for Improvement

Review all open Dependabot PRs for updates to dependencies. Ensure they are up-to-date, compatible, and safe to merge. This will help maintain security, stability, and up-to-date dependencies in the project.

Observed behavior

Multiple open Dependabot PRs are pending review and merge. This can result in outdated dependencies and potential security vulnerabilities if left unaddressed.

Desired behavior

Carefully review all Dependabot PRs, verify that the dependency updates do not introduce breaking changes, and merge them if appropriate. If a PR cannot be merged, document the reason.

Proposed Fix

Assign reviewers to Dependabot PRs, run all relevant tests, and ensure CI passes before merging. If automated merging is feasible and safe, consider enabling it for routine dependency updates.

rad Version

n/a

Operating system

No response

Additional context

This issue is for improving security practices related to container image pulls in CI workflows. Reference: https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication#access-without-authentication

Would you like to support us?

• Yes, I would like to support you

AB#17195

Start by reviewing the open Dependabot pull requests and the CI workflows that pull container images. Run the relevant CI checks and inspect dependency compatibility and security implications before deciding whether each PR is safe to merge. Document reasons for any PR left open, and confirm that approved updates merge successfully.