3 Commits

Author	SHA1	Message	Date
cucadmuh	c0d7079e88	chore(deps): restrict Dependabot to security updates only (#918) ... Disable scheduled version-update PRs (open-pull-requests-limit: 0). Keep grouped security PRs per ecosystem; symphonia migration ignores unchanged.	2026-05-29 23:19:18 +03:00
cucadmuh	ad53b3f2d6	chore(deps): batch npm bumps and Dependabot Symphonia ignore (#904) ... * chore(deps): batch remaining Dependabot npm bumps and ignore Symphonia 0.6 Bump @vitejs/plugin-react, @tauri-apps/cli, react-router-dom, and vitest; configure Dependabot to skip symphonia >=0.6 and adapter-libopus >=0.3 until the coordinated migration tracked in workdocs. * chore(nix): sync npmDepsHash with package-lock.json * chore: retrigger CI for PR checks --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-05-29 21:21:54 +03:00
cucadmuh	be32792f5d	chore: add SECURITY.md and Dependabot config (#893) ... Document private vulnerability reporting and enable weekly npm/Cargo dependency update PRs; link CONTRIBUTING to the new security policy.	2026-05-29 20:22:33 +03:00