fix(security): add dependabot, use GHA SHA values#31

Open

jjfrench wants to merge 1 commit into

mainfrom

issue-1400/security

jjfrench commented Jun 8, 2026

Member

Description

adds dependabot once a month, groups by package dependencies and GitHub actions, uses a cooldown period to ensure we're not using new vulnerabilities - this won't affect dependabot's security updates
swaps GitHub action version tags to SHA values


          fix(security): add dependabot, use GHA SHA values

05b402b

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet