From a43a47de7a51398978d6ea9d3fc9299e02bb7156 Mon Sep 17 00:00:00 2001 From: Niek Palm Date: Sat, 29 Nov 2025 10:22:10 +0100 Subject: [PATCH 1/2] chore: create dedeciated environment for release --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2e449cfef7..f122b6420c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -3,7 +3,6 @@ on: push: branches: - main - - v1 workflow_dispatch: concurrency: @@ -22,6 +21,7 @@ jobs: actions: write # for release-please-action to trigger other workflows id-token: write # for actions/attest-build-provenance to generate attestations attestations: write # for actions/attest-build-provenance to write attestations + environment: release steps: - name: Harden the runner (Audit all outbound calls) uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 From 86dad179f2620671e8a2ba30597b270928e80c23 Mon Sep 17 00:00:00 2001 From: Niek Palm Date: Thu, 18 Dec 2025 22:33:14 +0100 Subject: [PATCH 2/2] -chore: supply chain security, increase cooldown to 7 --- .github/dependabot.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 68be1d8a5a..dd7c872c5a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,7 +16,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 groups: github: patterns: @@ -28,7 +28,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 groups: aws: patterns: @@ -65,7 +65,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 labels: - "dependencies" - "docker" @@ -81,7 +81,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 labels: - "dependencies" - "docker" @@ -97,7 +97,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 groups: python-deps: patterns: