From 5c661322a402c648d4febbd734d8953145eb4a96 Mon Sep 17 00:00:00 2001 From: Quinn <33108110+QuinnNTonic@users.noreply.github.com> Date: Tue, 30 Jun 2026 11:28:13 -0400 Subject: [PATCH] chore: remove dependency-audit workflow v1 (imPublic) is maintenance-only; the recurring npm-audit scan is being retired alongside Dependabot. Dependency/security work is routed to involveMINT 2.0. Co-Authored-By: Claude --- .github/workflows/dependency-audit.yml | 22 ---------------------- 1 file changed, 22 deletions(-) delete mode 100644 .github/workflows/dependency-audit.yml diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml deleted file mode 100644 index e2bfaa27..00000000 --- a/.github/workflows/dependency-audit.yml +++ /dev/null @@ -1,22 +0,0 @@ -name: Dependency audit - -# Recurring vulnerability scan of npm dependencies. Report-only — never blocks merges. -on: - schedule: - - cron: "0 6 * * 1" # weekly, Mondays 06:00 UTC - workflow_dispatch: - pull_request: - paths: - - "package.json" - - "package-lock.json" - -jobs: - audit: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 - with: - node-version: "20" - - name: npm audit (production deps, report only) - run: npm audit --omit=dev || true