From 80a60b7123a292dfcc259ba52088e2939c087892 Mon Sep 17 00:00:00 2001
From: tallyhuhu <grafinitallyhu@gmail.com>
Date: Tue, 28 Apr 2026 16:39:57 +0700
Subject: [PATCH] ci: test dependency updater

---
 .github/workflows/pr.yml                  | 17 +++++++++++++++++
 .github/workflows/update-dependencies.yml |  5 ++++-
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 237faa4c..6ddb0412 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -8,6 +8,23 @@ permissions:
   contents: read
 
 jobs:
+  dependency-updater:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
+        with:
+          egress-policy: audit
+
+      - name: Checkout
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Test dependency updater
+        run: go test ./...
+        working-directory: dependency_updater
+
   geth:
     strategy:
       matrix:
diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
index 3ce14cff..04bd49c8 100644
--- a/.github/workflows/update-dependencies.yml
+++ b/.github/workflows/update-dependencies.yml
@@ -20,6 +20,9 @@ jobs:
 
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
+      - name: test dependency updater
+        run: cd dependency_updater && go test ./...
+
       - name: build dependency updater
         run: cd dependency_updater && go build
 
@@ -37,4 +40,4 @@ jobs:
           commit-message: ${{ steps.run_dependency_updater.outputs.TITLE }}
           body: "${{ steps.run_dependency_updater.outputs.DESC }}"
           branch: run-dependency-updater
-          delete-branch: true
\ No newline at end of file
+          delete-branch: true