Dependabot hardening + dependency update bundle - #84

Merged

lelia merged 11 commits into

mainfrom

lelia/dependabot-hardening

Jun 2, 2026

Commits on Jun 1, 2026

Harden Dependabot reviews and bundle dependency updates

lelia
and
Claude (claude)
committed
b77634d
chore(release): bump to 3.1.2

lelia
and
Claude (claude)
committed
69524b9
Extend dependency review to maintainers (free + enterprise SFW)

lelia
and
Claude (claude)
committed
bca454d
fix(dependency-review): use runner Python, forbid uv interpreter download

lelia
and
Claude (claude)
committed
37d06ad
fix(dependency-review): require strict org membership for enterprise SFW

lelia
and
Claude (claude)
committed
b0e50b0
chore(dependency-review): rename enterprise secret to SOCKET_SFW_API_TOKEN

lelia
and
Claude (claude)
committed
9f5b0fb
fix(dependency-review): scope SFW token to a dedicated environment

lelia
and
Claude (claude)
committed
6d2433c
fix(dependency-review): gate enterprise on write-access (non-fork), not author_association

lelia
and
Claude (claude)
committed
8f1318e

Commits on Jun 2, 2026