Deterministic Commit Message Builder for Dependency Updater

[dxbr]

Description

This update addresses an issue in the dependency updater where commit titles and descriptions were generated in a nondeterministic order due to iterating over a Go map.
The changes ensure that dependency updates are alphabetically sorted before composing commit metadata, resulting in stable, predictable commit messages.
Unit tests have been added to verify deterministic formatting and to ensure the original dependency slice is not mutated.

Summary

• Ensure the dependency updater builds commit titles and descriptions from a stable, alphabetically sorted dependency list.
• Add unit tests that exercise deterministic formatting behavior and guard against slice mutation.

Testing

• ✅ go test ./...

Notes

These improvements guarantee consistent commit messages across runs, improving traceability, CI reliability, and reducing random diffs in automated dependency updates.

[cb-heimdall]

🟡 Heimdall Review Status

Requirement	Status	More Info
Reviews	🟡 0/1	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 1 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 1 1 1 if commit is unverified 0 Sum 1

[cb-heimdall]

Review Error for danyalprout @ 2025-10-09 04:10:38 UTC User failed mfa authentication, either user does not exist or public email is not set on your github profile. \ see go/mfa-help

[github-actions[bot]]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[github-actions[bot]]

This pull request was closed because it has been inactive for 5 days since being marked as stale.