Repository navigation

chore(deps): bundle Dependabot updates + harden dependency review workflows - #78

Merged

lelia merged 16 commits into

mainfrom

lelia/dependabot-bundle-hardening

Jul 22, 2026

Commits on Jun 2, 2026
- chore(deps): bundle dependency updates + harden supply-chain review
  
  lelia
  and
  Claude (claude)
  committed
  8dc2dc1
Commits on Jun 3, 2026
- fix(ci): drop socket-firewall environment gate, add required coverage gate
  
  lelia
  and
  Claude (claude)
  committed
  1c72249
- fix(ci): scope SFW token via environment (no approval rule), harden gate
  lelia
  committed
  3c82d33
Commits on Jun 26, 2026
- fix(ci): degrade SFW enterprise to free when token absent; upload JSON report
  lelia
  committed
  039f90e
- feat(core-tool-watch): add Semgrep upstream proxy for OpenGrep Socket scoring
  lelia
  committed
  e07c9f4
Commits on Jul 21, 2026
- chore(deps): bundle 3 newly-filed Dependabot PRs (#81, #86, #87)
  lelia
  committed
  83acf84
- fix(core-tool-watch): address Cursor Bugbot findings on #78
  lelia
  committed
  208b5a2
Commits on Jul 22, 2026
- fix(ci): address 2 more Bugbot findings on #78
  lelia
  committed
  5e56aad
- chore: merge latest main to unblock dependency-review CI
  lelia
  committed
  0a8c1bf
- fix(ci): restore bare LICENSE to unblock CI (mirrors #88)
  lelia
  committed
  328956b
- fix(core-tool-watch): per-event concurrency group + document Dependabot secret gap
  
  lelia
  and
  Claude (claude)
  committed
  f6fb735
- feat(deps-review): route Dependabot through sfw-enterprise; isolate core-tool-watch scan env
  
  lelia
  and
  Claude (claude)
  committed
  18a01d8
- fix(core-tool-watch): sync scan env with --no-install-project
  
  lelia
  and
  Claude (claude)
  committed
  425165e
- fix(core-tool-watch): org-scoped purl endpoint + fail closed on empty API result
  
  lelia
  and
  Claude (claude)
  committed
  6971c62
- fix(core-tool-watch): resolve org slug only when unambiguous
  
  lelia
  and
  Claude (claude)
  committed
  99c113b
- fix(core-tool-watch): fail closed on unverified pinned coordinates
  
  lelia
  and
  Claude (claude)
  committed
  cdbfdce

Navigation Menu

Repository navigation

chore(deps): bundle Dependabot updates + harden dependency review workflows - #78

chore(deps): bundle Dependabot updates + harden dependency review workflows#78
lelia merged 16 commits into
mainfrom
lelia/dependabot-bundle-hardening

Commits on Jun 2, 2026

chore(deps): bundle dependency updates + harden supply-chain review

Commits on Jun 3, 2026

fix(ci): drop socket-firewall environment gate, add required coverage gate

fix(ci): scope SFW token via environment (no approval rule), harden gate

Commits on Jun 26, 2026

fix(ci): degrade SFW enterprise to free when token absent; upload JSON report

feat(core-tool-watch): add Semgrep upstream proxy for OpenGrep Socket scoring

Commits on Jul 21, 2026

chore(deps): bundle 3 newly-filed Dependabot PRs (#81, #86, #87)

fix(core-tool-watch): address Cursor Bugbot findings on #78

Commits on Jul 22, 2026

fix(ci): address 2 more Bugbot findings on #78

chore: merge latest main to unblock dependency-review CI

fix(ci): restore bare LICENSE to unblock CI (mirrors #88)

fix(core-tool-watch): per-event concurrency group + document Dependabot secret gap

feat(deps-review): route Dependabot through sfw-enterprise; isolate core-tool-watch scan env

fix(core-tool-watch): sync scan env with --no-install-project

fix(core-tool-watch): org-scoped purl endpoint + fail closed on empty API result

fix(core-tool-watch): resolve org slug only when unambiguous

fix(core-tool-watch): fail closed on unverified pinned coordinates