From ed01fe9d11b99aeca59a8a8c749e1134e7aa3aba Mon Sep 17 00:00:00 2001
From: sburman <sburman@twilio.com>
Date: Wed, 26 Aug 2026 15:47:49 +0530
Subject: [PATCH 1/4] update action

---
 .github/workflows/test-and-deploy.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/test-and-deploy.yml b/.github/workflows/test-and-deploy.yml
index b922b69253..f934202576 100644
--- a/.github/workflows/test-and-deploy.yml
+++ b/.github/workflows/test-and-deploy.yml
@@ -27,7 +27,7 @@ jobs:
           ecosystem: maven
 
       - name: Set up Java
-        uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3.14.2
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
           java-version: ${{ matrix.java }}
@@ -78,7 +78,7 @@ jobs:
 #        run: make docker-build && make docker-push
 
       - name: Set up Java for Maven Central publish
-        uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3.14.2
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           java-version: '11'
           distribution: temurin

From e7aee336c1a2c59bd42786fb9e2bcf4627c669ef Mon Sep 17 00:00:00 2001
From: sburman <sburman@twilio.com>
Date: Thu, 27 Aug 2026 11:49:50 +0530
Subject: [PATCH 2/4] automate pinning shas

---
 .github/dependabot.yml            | 6 ++++++
 .github/workflows/pre-release.yml | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..5ace4600a1
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index e509a3d82c..52efedf7da 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -2,7 +2,7 @@ name: Cluster Tests and Release Readiness
 
 on:
   push:
-    branches: [gated-release]
+    branches: [main]
   schedule:
     - cron: '0 15 * * 1'  # 8AM PST every Monday
   workflow_dispatch:

From 97301b6d307cd94b296460b768fbda0b9c9dbf44 Mon Sep 17 00:00:00 2001
From: sburman <sburman@twilio.com>
Date: Thu, 27 Aug 2026 12:07:04 +0530
Subject: [PATCH 3/4] fix env settings for cluster tests

---
 .github/workflows/pre-release.yml     | 2 +-
 .github/workflows/test-and-deploy.yml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index 52efedf7da..17c13bc56d 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-x64
     if: github.repository_owner == 'twilio'
     timeout-minutes: 20
-    environment: production
+    environment: pre-production
     permissions:
       contents: read
       id-token: write
diff --git a/.github/workflows/test-and-deploy.yml b/.github/workflows/test-and-deploy.yml
index f934202576..b922b69253 100644
--- a/.github/workflows/test-and-deploy.yml
+++ b/.github/workflows/test-and-deploy.yml
@@ -27,7 +27,7 @@ jobs:
           ecosystem: maven
 
       - name: Set up Java
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
+        uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3.14.2
         with:
           distribution: temurin
           java-version: ${{ matrix.java }}
@@ -78,7 +78,7 @@ jobs:
 #        run: make docker-build && make docker-push
 
       - name: Set up Java for Maven Central publish
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
+        uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3.14.2
         with:
           java-version: '11'
           distribution: temurin

From c996bff7382a42886ba3dcdf8e28ca51344c8c0c Mon Sep 17 00:00:00 2001
From: sburman <sburman@twilio.com>
Date: Thu, 27 Aug 2026 12:35:17 +0530
Subject: [PATCH 4/4] Update pre-release.yml

---
 .github/workflows/pre-release.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index 17c13bc56d..3d217c32e1 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -13,7 +13,9 @@ jobs:
     runs-on: ubuntu-x64
     if: github.repository_owner == 'twilio'
     timeout-minutes: 20
-    environment: pre-production
+#     todo: when the bot allows another env to exist
+#    environment: pre-production
+    environment: production
     permissions:
       contents: read
       id-token: write