Stabilize CI workflows with lockfile parity and green-gated Dependabot auto-merge - #114

Draft

SMSDAO with Copilot wants to merge 9 commits into

copilot/update-dependabot-configfrom

copilot/fix-workflows-stability

Commits on May 9, 2026

fix(ci): stabilize workflow dependency and automerge gates

Copilot
and
SMSDAO
authored
80b35f1
fix(lockfile): repair broken pnpm lockfile for frozen installs
Copilot
authored
784ad59
chore(ci): refine sarif gate and dependabot check timeout
Copilot
authored
e91b390
chore(ci): pin codeql action and simplify runner env
Copilot
authored
dfc2b5c
chore(ci): simplify sarif condition and parameterize merge timeout
Copilot
authored
b28f5c0
chore(ci): tighten trivy sarif upload guard expression
Copilot
authored
af309eb
chore(ci): validate trivy artifact and preserve check timeout status
Copilot
authored
7c654a7
chore(ci): ensure failure-safe trivy upload and tighten docs version matrix
Copilot
authored
7cc739d
chore(ci): polish workflow condition and timeout env quoting
Copilot
authored
6ecb23b