2 Commits

Author	SHA1	Message	Date
cucadmuh	c0d7079e88	chore(deps): restrict Dependabot to security updates only (#918) ... Disable scheduled version-update PRs (open-pull-requests-limit: 0). Keep grouped security PRs per ecosystem; symphonia migration ignores unchanged.	2026-05-29 23:19:18 +03:00
cucadmuh	be32792f5d	chore: add SECURITY.md and Dependabot config (#893) ... Document private vulnerability reporting and enable weekly npm/Cargo dependency update PRs; link CONTRIBUTING to the new security policy.	2026-05-29 20:22:33 +03:00