Scope Dependabot to our beyond-template packages - #224

Merged

alex-rawlings-yyc merged 19 commits into

mainfrom

dependabot-security-updates

Aug 20, 2026

Commits on Aug 17, 2026

Scope Dependabot to our beyond-template packages
alex-rawlings-yyc
committed
f26dbcc
Slow Dependabot to monthly; fix the ignore rationale
alex-rawlings-yyc
committed
6884f29
Cover GitHub Actions; check the scope against the template
alex-rawlings-yyc
committed
b3650a4
Pin the dependency check to the merged template commit
alex-rawlings-yyc
committed
a0bd260
Read the dependency baseline from a checked-in copy
alex-rawlings-yyc
committed
13de9fa
ℹ If these came in with a template merge, refresh
alex-rawlings-yyc
committed
ef1499c
Record the template commit #204 actually merged
alex-rawlings-yyc
committed
ed6d4fa
Leave the dependency baseline intact when git fails
alex-rawlings-yyc
committed
95eb6fe

Commits on Aug 18, 2026

Commits on Aug 19, 2026

Report unreadable Dependabot entries, not a stack trace
alex-rawlings-yyc
committed
d019637
Hold the check to one npm ecosystem entry
alex-rawlings-yyc
committed
3b40067
Reject a package on both the allow and ignore lists
alex-rawlings-yyc
committed
da1914f
Report failures with a synchronous write
alex-rawlings-yyc
committed
1ae6606
Report Dependabot group keys this check cannot read
alex-rawlings-yyc
committed
562a073