fix: Pass integer repository IDs for Dependabot secret

[Frank2006x]

Summary

Removes the legacy workaround in CreateOrUpdateOrgSecret that converted SelectedRepositoryIDs from []int64 to []string.

The GitHub API expects integer repository IDs for PUT /orgs/{org}/dependabot/secrets/{secret_name}. This change ensures the request payload uses the correct type.

This addresses the [Dependabot secrets item in the API version migration tracking list](#4077 (comment)).

part of #4077

Tests

• script/fmt.sh
• go test ./github
• script/test.sh
• script/lint.sh

Assisted Contribution

Drafted with the assistance of an AI coding agent. All changes and test results were reviewed and verified against repository guidelines.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[gemini-code-assist]

Code Review

This pull request simplifies the CreateOrUpdateOrgSecret function in github/dependabot_secrets.go and its corresponding test in github/dependabot_secrets_test.go by removing the manual conversion of repository IDs to strings and directly passing the request body. There are no review comments, and I have no feedback to provide.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.61%. Comparing base (c273cd8) to head (f805e96).

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4618      +/-   ##
==========================================
- Coverage   98.61%   98.61%   -0.01%     
==========================================
  Files         199      199              
  Lines       18664    18653      -11     
==========================================
- Hits        18406    18395      -11     
  Misses        258      258              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[gmlewis]

My only concern here is that this may break GitHub Enterprise users who are stuck on older versions.

[Frank2006x]

I checked the repository’s API metadata and existing implementations, and I don’t see evidence that this change would break GHES users.

The Dependabot organization-secret endpoint is mapped to GitHub.com, GHEC, and GHES 3.22 in openapi_operations.yaml (lines 3501-3507). The [GitHub REST API documentation](https://docs.github.com/en/rest/dependabot/secrets?apiVersion=2026-03-10#create-or-update-an-organization-secret) defines selected_repository_ids as an array of integers.

SecretOrgRequest uses []int64, and Actions and Agents pass repository IDs without converting them to strings (actions_secrets.go, lines 330-337; dependabot_secrets.go, lines 171-183).

Issues #2401, #2794, and #2817 document the history of the string-conversion workaround:

• Change DependabotSecretsSelectedRepoIDs to []string #2401
• Update DependabotSecretsSelectedRepoIDs type to []int64 #2794
• Fix CreateOrUpdateOrgSecret regression introduced in v53 #2817

This change makes Dependabot consistent with Actions and the documented API schema, which defines selected_repository_ids as an array of integers. I haven't found evidence of a GHES compatibility issue in the repository's existing metadata or implementations.

[gmlewis]

Thank you, @Frank2006x.
LGTM.
Awaiting second LGTM+Approval from any other contributor to the repo before merging.

cc: @stevehipwell - @Not-Dhananjay-Mishra