Update dependencies to fix vulnerabilities (2026-06-19)

doc/changes/unreleased.md

@@ -5,6 +5,10 @@
 Updated the nox DB-version default to come from `BaseConfig` instead of the hardcoded `7.1.9`,
 so ITDE-related test flows use the configured Exasol baseline and unit-test help no longer advertises `--db-version`.
 
+## Feature
+
+* #874: Added the `security` label to dependency update PR creation
+
 ## Bug
 
 * #744: Updated nox DB-version handling to use `BaseConfig.minimum_exasol_version` instead hardcoded `7.1.9`

exasol/toolbox/templates/github/workflows/dependency-update.yml

@@ -23,14 +23,14 @@ jobs:
           persist-credentials: true
           fetch-depth: 0
 
-      - name: Fail if not running on the default branch
-        id: check-branch
-        if: github.ref != format('refs/heads/{0}', github.event.repository.default_branch)
-        env:
-          CURRENT_BRANCH: ${{ github.ref }}
-        run: |
-          echo "Not running on the default branch. Current ref is: $CURRENT_BRANCH"
-          exit 1
+#      - name: Fail if not running on the default branch
+#        id: check-branch
+#        if: github.ref != format('refs/heads/{0}', github.event.repository.default_branch)
+#        env:
+#          CURRENT_BRANCH: ${{ github.ref }}
+#        run: |
+#          echo "Not running on the default branch. Current ref is: $CURRENT_BRANCH"
+#          exit 1
 
       - name: Set up Python & Poetry Environment
         id: set-up-python-and-poetry-environment
@@ -111,6 +111,7 @@ jobs:
 
           PR_URL=$(gh pr create \
                       --base "$BASE_BRANCH" \
+                      --label "security" \
                       --title "Update dependencies to fix vulnerabilities ($(date '+%Y-%m-%d'))" \
                       --body "$PR_BODY")