Repository navigation

Dependabot hardening + dependency update bundle - #84

Merged

lelia merged 11 commits into

mainfrom

lelia/dependabot-hardening

Jun 2, 2026

Commits on Jun 1, 2026
- Harden Dependabot reviews and bundle dependency updates
  
  lelia
  and
  Claude (claude)
  committed
  b77634d
- chore(release): bump to 3.1.2
  
  lelia
  and
  Claude (claude)
  committed
  69524b9
- Extend dependency review to maintainers (free + enterprise SFW)
  
  lelia
  and
  Claude (claude)
  committed
  bca454d
- fix(dependency-review): use runner Python, forbid uv interpreter download
  
  lelia
  and
  Claude (claude)
  committed
  37d06ad
- fix(dependency-review): require strict org membership for enterprise SFW
  
  lelia
  and
  Claude (claude)
  committed
  b0e50b0
- chore(dependency-review): rename enterprise secret to SOCKET_SFW_API_TOKEN
  
  lelia
  and
  Claude (claude)
  committed
  9f5b0fb
- fix(dependency-review): scope SFW token to a dedicated environment
  
  lelia
  and
  Claude (claude)
  committed
  6d2433c
- fix(dependency-review): gate enterprise on write-access (non-fork), not author_association
  
  lelia
  and
  Claude (claude)
  committed
  8f1318e
Commits on Jun 2, 2026