2GT-Rich
fe1f7a4001
Merge pull request #4 from 2GT-Media-Group-LLC/dependabot/github_actions/github/codeql-action-4
...
Bump github/codeql-action from 3 to 4
2026-04-19 09:46:42 -07:00
2GT-Rich
241204a40d
Merge pull request #2 from 2GT-Media-Group-LLC/dependabot/github_actions/actions/setup-node-6
...
Bump actions/setup-node from 4 to 6
2026-04-19 09:46:31 -07:00
2GT-Rich
114c9683c3
Merge pull request #1 from 2GT-Media-Group-LLC/dependabot/github_actions/actions/checkout-6
...
Bump actions/checkout from 4 to 6
2026-04-19 09:46:28 -07:00
2GT-Rich and Claude Sonnet 4.6
484e529b88
Remove non-existent labels from dependabot.yml
...
Dependabot was logging warnings on every PR because the configured
labels (frontend, backend, dependencies, etc.) don't exist as GitHub
labels in this repository. Removing them stops the noise.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-16 10:38:28 -07:00
dependabot[bot]
ed2d757bf4
Bump github/codeql-action from 3 to 4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-16 16:56:46 +00:00
dependabot[bot]
3fc6a6f350
Bump actions/setup-node from 4 to 6
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-16 16:56:42 +00:00
dependabot[bot]
24167879ab
Bump actions/checkout from 4 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-16 16:56:39 +00:00
2GT-Rich
e43b80a9a2
Add security standards and CI infrastructure
...
- SECURITY.md with vulnerability disclosure policy and self-hosting guidance
- Dependabot config for weekly dependency updates (npm, Docker, Actions)
- ESLint v9 flat config for frontend and backend, with eslint-plugin-security
- GitHub Actions CI: lint, typecheck, build, and npm audit on every push/PR
- CodeQL workflow for automated security scanning (runs on push and weekly)
2026-04-16 09:55:53 -07:00
Rich Teslow
e16e86a0cf
Updated README
2026-04-13 18:24:45 -07:00
2GT-Rich
dependabot[bot]