ci(security): add fix-dependabot-alerts automation#328

Merged

robgruen merged 9 commits into

mainfrom

dev/talzacc/fix-dependabot-alerts

Jun 3, 2026

Commits on Jun 2, 2026

build: adopt Central Package Management + lockfiles + transitive audit

TalZaccai
and
Copilot
committed
build: drop committed packages.lock.json, keep CPM + audit

TalZaccai
and
Copilot
committed
build: drop unnecessary packages.lock.json gitignore entry

TalZaccai
and
Copilot
committed
Merge branch 'main' into dev/talzacc/cpm-lockfile-modernization

TalZaccai
and
Copilot
committed
ci(security): add fix-dependabot-alerts automation

TalZaccai
and
Copilot
committed
ci(security): harden fix-dependabot-alerts per rubber-duck

TalZaccai
and
Copilot
committed
ci(security): address PR #328 review comments

TalZaccai
and
Copilot
committed
Merge branch 'main' into dev/talzacc/fix-dependabot-alerts
TalZaccai
authored
ci(security): push with default GITHUB_TOKEN, not App token

TalZaccai
and
Copilot
committed