master

GGitHubci: bump the github-actions group with 2 updates (#226)

59c4ac8a创建于 13 天前历史提交

文件	最后提交记录	最后更新时间
ISSUE_TEMPLATE	docs: add release infrastructure for v1.0.0 (#29) - CHANGELOG.md (Keep a Changelog) consolidating the 1.0.0 feature set - CONTRIBUTING.md (dev setup, Conventional Commits, evidence rule, release process) - SECURITY.md (private vulnerability reporting; local-tool scope) - .github PR template + bug/feature issue templates - docs/PERFORMANCE.md (measured benchmarks: extraction, discovery tax, cost) - docs/ARCHITECTURE.md (pipeline + component map) - README: version badge, docs nav links, updated repository structure	3 个月前
workflows	ci: bump the github-actions group with 2 updates (#226) Bumps the github-actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	13 天前
FUNDING.yml	chore: add FUNDING.yml to enable Sponsor button Sponsors profile approved and live at github.com/sponsors/virgiliojr94. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	3 个月前
PULL_REQUEST_TEMPLATE.md	chore(ci): generate CHANGELOG from commits with git-cliff (#104)	1 个月前
dependabot.yml	ci(security): add dependency CVE review on PRs + pip Dependabot Add a dependency-review job (actions/dependency-review-action, SHA-pinned) that runs on every pull request: it diffs the base vs head dependency graph, fails on a moderate+ CVE in any newly introduced dependency, and posts the findings as a summary comment on the PR. This stops a contributor from slipping a vulnerable or malicious package past review. Also add the pip ecosystem to Dependabot so Python extras get security alerts and bumps. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	3 个月前