From 4aaccc685f88f2a3fd1e379ee1cb87e889393149 Mon Sep 17 00:00:00 2001 From: Chris Farhood Date: Mon, 4 May 2026 05:37:56 +0000 Subject: [PATCH] chore: replace Dependabot references with Renovate - SECURITY.md: update to mention Renovate (org-wide Mend Renovate) - PROJECT_ASSESSMENT.md: mark Renovate as integrated (org-wide config) Closes PRI-389. Parent PRI-387. Co-Authored-By: Paperclip --- PROJECT_ASSESSMENT.md | 2 +- SECURITY.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/PROJECT_ASSESSMENT.md b/PROJECT_ASSESSMENT.md index 5779f41..fca5668 100644 --- a/PROJECT_ASSESSMENT.md +++ b/PROJECT_ASSESSMENT.md @@ -229,7 +229,7 @@ Headlamp v0.39.0 with default `watchPlugins: true` treats catalog-managed plugin **Action Items:** - [ ] Parallelize test execution - [ ] Add npm cache to GitHub Actions -- [ ] Integrate Dependabot +- [x] Renovate is configured org-wide via `github>privilegedescalation/.github:renovate-config` - [ ] Add semantic-release --- diff --git a/SECURITY.md b/SECURITY.md index 122ccd8..aa6ca22 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -212,7 +212,7 @@ If you discover a security vulnerability in this plugin, please report it via: The project uses: - **npm audit**: Runs automatically during `npm install` -- **Dependabot**: GitHub Dependabot monitors dependencies and creates PRs for updates +- **Renovate**: Automated dependency updates via Mend Renovate (org-wide configured) - **GitHub Actions**: CI workflow runs `npm audit` on every commit ### Updating Dependencies