Summary
- Match Buddy Bot job selection to the three schedules already declared by the workflow, without increasing run frequency.
- Pass event metadata through environment variables, preserve manual job choices, and fail visibly on unrecognized schedules or choices.
- Remove references to an undeclared, unused dashboard pin input found by actionlint.
- Run regressions against the actual workflow shell selector for every scheduled and manual path.
Verification
- Before the fix, the current hourly schedule selected no jobs and the regression failed.
- 3 tests pass (21 assertions), covering all declared schedules and manual selections.
- Pickier, actionlint and diff checks pass.
This repairs the existing dependency-update workflow; it does not publish a release, dispatch a scan, or report private audit findings.