Dependabot hardening + dependency update bundle#84

Open

lelia wants to merge 8 commits into

mainfrom

lelia/dependabot-hardening

Commits on Jun 1, 2026

Harden Dependabot reviews and bundle dependency updates

lelia
and
Claude (claude)
committed
chore(release): bump to 3.1.2

lelia
and
Claude (claude)
committed
Extend dependency review to maintainers (free + enterprise SFW)

lelia
and
Claude (claude)
committed
fix(dependency-review): use runner Python, forbid uv interpreter download

lelia
and
Claude (claude)
committed
fix(dependency-review): require strict org membership for enterprise SFW

lelia
and
Claude (claude)
committed
chore(dependency-review): rename enterprise secret to SOCKET_SFW_API_TOKEN

lelia
and
Claude (claude)
committed
fix(dependency-review): scope SFW token to a dedicated environment

lelia
and
Claude (claude)
committed
fix(dependency-review): gate enterprise on write-access (non-fork), not author_association

lelia
and
Claude (claude)
committed