* Fix Prefect event pagination host validation

* Add changelog

* Rename changelog

* Change changelog

* Skip writing lockfiles for targets with no wheels

Targets whose upload produced no non-empty lockfile entries no longer
produce a lockfile file. Previously an empty target wrote a lockfile
containing only a blank line, which could be committed to .deps/resolved
and leave the Agent pointing at an empty index.

AI-6182

Signed-off-by: iliakur <ilia.kurenkov@datadoghq.com>

* Update dependency resolution

Signed-off-by: iliakur <ilia.kurenkov@datadoghq.com>

* Remove stale lockfile when skipping empty target

Addresses codex review: publish job runs `git add .deps/` after
generating lockfiles, so a previously committed lockfile for a target
that now produces no wheels would remain checked in. Unlink it before
skipping so the stale pins are removed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* Update dependency resolution

---------

Signed-off-by: iliakur <ilia.kurenkov@datadoghq.com>
Co-authored-by: dd-agent-integrations-bot[bot] <dd-agent-integrations-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* Fix guarddog_path argument injection in command execution

Signed-off-by: sarah-witt <sarah.witt@datadoghq.com>

* remove whitespace check and add changelog

Signed-off-by: sarah-witt <sarah.witt@datadoghq.com>

* fix style

Signed-off-by: sarah-witt <sarah.witt@datadoghq.com>

* remove unused constant

Signed-off-by: sarah-witt <sarah.witt@datadoghq.com>

* Update guarddog/changelog.d/23377.fixed

Signed-off-by: sarah-witt <sarah.witt@datadoghq.com>

---------

Signed-off-by: sarah-witt <sarah.witt@datadoghq.com>

…#23348)

* Fix apply_overrides to support nested template overrides in spec.yaml

When a spec.yaml template reference has an overrides: block targeting a field
that lives inside a nested template (e.g. tags inside instances/default ->
instances/all_integrations -> instances/tags), apply_overrides previously
could not find the field because it only searched the raw (unexpanded)
template list.

The new _expand_and_find helper recursively loads nested template refs
in-place, allowing any named field at any nesting depth to be reached
from a single overrides: block in spec.yaml.

* Fix ruff formatting in template.py and test_template.py

Also fix master workflow by pointing it explicitly at the stable storage

…gFederate" (#23332)

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>