Repository navigation

Dependabot hardening and workflow pipeline cleanup - #217

Merged

lelia merged 19 commits into

mainfrom

lelia/fix-dependabot-checks

Jun 2, 2026

Commits on May 29, 2026
Commits on May 30, 2026
- ci: factor Socket Firewall setup into a composite action
  lelia
  committed
  728bb15
Commits on May 31, 2026
- ci: speed up and de-duplicate the release & preview pipelines
  lelia
  committed
  6f89e0f
- ci: pin all GitHub Actions to latest release SHAs with version comments
  lelia
  committed
  1f5857f
- Keep dependabot action pins visible
  lelia
  committed
  cb7bc9f
- Merge remote-tracking branch 'origin/lelia/improve-workflow-pipelines' into lelia/fix-dependabot-checks
  lelia
  committed
  88b510e
- Configure Dependabot for composite actions
  lelia
  committed
  ba9b946
- Include composite actions in Dependabot review notice
  lelia
  committed
  d9cb95c
- Rename Docker setup composite action
  lelia
  committed
  e3bef31
Commits on Jun 1, 2026
- Extend dependency review to maintainer PRs
  lelia
  committed
  e653f3f
- Use CLI Socket token for enterprise dependency review
  lelia
  committed
  1ca3aa7
- Restrict enterprise SFW to org members
  lelia
  committed
  cf2f02f
- Use dedicated SFW token secret
  lelia
  committed
  41be66a
- Use environment-scoped SFW token
  lelia
  committed
  64a4d96
- Gate enterprise SFW on non-fork PRs
  lelia
  committed
  4f68ba1
Commits on Jun 2, 2026
- Merge branch 'main' into lelia/fix-dependabot-checks
  lelia
  committed
  f9fcbd9
- ci(dependency-review): bundle SFW reports as artifacts
  lelia
  committed
  0819738