Depot CI: add variants for secrets and variables

You can now add secret and variable variants in Depot CI and limit their availability by environment, repository, branch, and workflow file from the dashboard.

• Attributes let you limit when a secret or variable is injected by repository, branch name, workflow file, or environment name. Branch and workflow attributes support glob patterns like release/* or deploy-*.yaml. Attributes combine: multiple attribute types narrow availability, while multiple attributes of the same type broaden availability.
• Variants let you create multiple versions of the same secret or variable name that resolve to different values depending on the workflow context. For example, you can have one DATABASE_URL secret for all repositories, a different value scoped to a specific repository, and another selected only when the job runs in a production environment. Depot picks the most specific matching variant before the job starts.

The dashboard includes filters to check which variant resolves for a job before running it, so you can validate complex secret configurations.

For full details, see Manage secrets and variables.