mengzhx/semantica
1
0
Fork 0
mirror of https://github.com/semantica-agi/semantica.git synced 2026-09-13 04:04:09 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,672 Commits 61 Branches 24 Tags
f542fc86528fad3dba767dfc089dca8d1ac7327a
Commit Graph
7 Commits
Author SHA1 Message Date
KaifAhmad1andqodo-code-review 34adf94f01 Fix Dependabot configuration validation errors 
- Remove invalid 'priority' property from updates configuration
- Remove invalid 'update-types' property from updates configuration
- Remove invalid 'day: monday' from monthly schedule (Qodo feedback)
- Fix all Dependabot schema validation errors
- Maintain all security and review functionality
- Configuration now passes Dependabot validation
- Automated security updates will resume working

Co-authored-by: qodo-code-review <bot@qodo.ai>
 2026-02-09 17:02:27 +05:30
KaifAhmad1 3381a1f5ff Fix Dependabot configuration validation errors 
- Remove invalid 'priority' property from updates configuration
- Remove invalid 'update-types' property from updates configuration
- Fix all Dependabot schema validation errors
- Maintain all security and review functionality
- Configuration now passes Dependabot validation
- Automated security updates will resume working
 2026-02-09 16:38:29 +05:30
KaifAhmad1 b78f03872a Fix Dependabot configuration validation errors 
- Removed empty registries section (was causing null object error)
- Changed 'bi-weekly' to 'weekly' interval (invalid value)
- Fixed 'dependency-type' from 'direct' to 'production' in security-critical group
- Changed monthly day from '1' to 'monday' (invalid day format)
- Simplified configuration to meet Dependabot specification
- Maintains all security and update functionality
- Weekly schedule provides regular security updates
 2026-02-09 16:24:33 +05:30
KaifAhmad1 854f7cbb8c Enhanced security configuration with Dependabot 
- Configured bi-weekly security updates with manual review by @KaifAhmad1
- Implemented automated security scans (Monday & Thursday at 7 AM IST) with Bandit, Safety, Semgrep
- Added security-critical package grouping (cryptography, requests, urllib3, certifi, pyopenssl)
- Enterprise-grade security with audit trail, compliance features, and zero auto-merge
- Optimized IST timezone scheduling (Security scans: 7 AM IST, PRs: 9 AM IST)
- Aligned with new Dependabot features: open-source proxy support, smart dependency grouping for Snowflake/Arrow/benchmark features, private registry support, semantic commit prefixes, and latest GitHub security best practices
- Added comprehensive security workflow for automated vulnerability scanning
- Updated CHANGELOG.md with security configuration details

Security enhancements maintain full manual control while providing automated vulnerability protection and enterprise-grade compliance features.
 2026-02-09 14:43:55 +05:30
KaifAhmad1 f8ce4dbf14 chore: update Dependabot configuration 
- Set weekly schedule for Python dependencies
- Set monthly schedule for GitHub Actions
- Disable PR creation (monitoring only)
 2025-12-03 11:58:41 +05:30
KaifAhmad1 2a7bdca157 chore: improve Dependabot configuration 
- Add specific schedule times (Mondays at 9:00 AM)
- Add ignore rule for major version updates
- Improve configuration comments
 2025-12-03 11:41:55 +05:30
KaifAhmad1 03b84ab238 docs: Add comprehensive open source project improvements 
- Add essential open source files (CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, CHANGELOG.md, CONTRIBUTORS.md)
- Add GitHub issue and PR templates
- Add CI/CD workflows (CI, docs, release, dependabot)
- Add pre-commit hooks configuration
- Add documentation enhancements (architecture, governance, contributing, community)
- Add developer experience scripts (setup-dev, run-tests, format-code, check-code)
- Add community features (SUPPORT.md, .all-contributorsrc)
- Enhance README badges and project metadata
- Update mkdocs.yml navigation structure
 2025-11-24 13:30:49 +05:30