mirror of
https://github.com/Psychotoxical/psysonic.git
synced 2026-07-22 15:25:46 +00:00
cucadmuh
be32792f5d
Document private vulnerability reporting and enable weekly npm/Cargo dependency update PRs; link CONTRIBUTING to the new security policy.
23 lines
505 B
YAML
23 lines
505 B
YAML
# Weekly dependency update PRs for npm (frontend) and Cargo (src-tauri workspace).
|
|
# Review and merge like any other PR; run CI before merging.
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: npm
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
day: monday
|
|
open-pull-requests-limit: 5
|
|
labels:
|
|
- dependencies
|
|
|
|
- package-ecosystem: cargo
|
|
directory: /src-tauri
|
|
schedule:
|
|
interval: weekly
|
|
day: monday
|
|
open-pull-requests-limit: 5
|
|
labels:
|
|
- dependencies
|