From c6d3314a6fb44f6cc409fde42268f37002f9fb8a Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Thu, 30 Jul 2026 23:46:35 +0100 Subject: [PATCH 1/3] chore: remediate CI and Dependabot configuration --- .github/dependabot.yml | 61 ++++++------------------------ GOVERNANCE.md => GOVERNANCE.adoc | 0 MAINTAINERS | 43 --------------------- MAINTAINERS.md => MAINTAINERS.adoc | 0 4 files changed, 12 insertions(+), 92 deletions(-) rename GOVERNANCE.md => GOVERNANCE.adoc (100%) delete mode 100644 MAINTAINERS rename MAINTAINERS.md => MAINTAINERS.adoc (100%) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4d9ae2f..408971f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,51 +1,14 @@ -# SPDX-License-Identifier: MPL-2.0 -# Dependabot configuration for RSR-compliant repositories -# Covers common ecosystems - remove unused ones for your project - version: 2 updates: - # GitHub Actions - always include - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "weekly" - groups: - actions: - patterns: - - "*" - - # Rust/Cargo - - package-ecosystem: "cargo" - directory: "/" - schedule: - interval: "weekly" - # `open-pull-requests-limit: 0` suppresses routine version-update PRs - # while leaving Dependabot SECURITY PRs flowing. The previous - # `ignore: "*" patch` rule also silenced security PRs under GitHub\'s - # current Dependabot behaviour. See rsr-template-repo commit 78b050e - # and 007-lang/audits/audit-dependabot-automation-gap-2026-04-17.md. - open-pull-requests-limit: 0 - - # Elixir/Mix - - package-ecosystem: "mix" - directory: "/" - schedule: - interval: "weekly" - - # Node.js/npm - - package-ecosystem: "npm" - directory: "/" - schedule: - interval: "weekly" - - # Python/pip - - package-ecosystem: "pip" - directory: "/" - schedule: - interval: "weekly" - - # Nix flakes - - package-ecosystem: "nix" - directory: "/" - schedule: - interval: "weekly" +- package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + groups: + actions: + patterns: + - '*' +- package-ecosystem: npm + directory: / + schedule: + interval: weekly diff --git a/GOVERNANCE.md b/GOVERNANCE.adoc similarity index 100% rename from GOVERNANCE.md rename to GOVERNANCE.adoc diff --git a/MAINTAINERS b/MAINTAINERS deleted file mode 100644 index 37f6411..0000000 --- a/MAINTAINERS +++ /dev/null @@ -1,43 +0,0 @@ -# Maintainers - -This file lists the current maintainers of this project. - -## Active Maintainers - -| Name | GitHub | Role | Since | -|------|--------|------|-------| -| Metadatastician | @metadatastician | Primary | Project Start | - -## Emeritus Maintainers - -None at this time. - -## Becoming a Maintainer - -To become a maintainer: - -1. Demonstrate consistent, high-quality contributions -2. Show understanding of the project's goals and architecture -3. Be active in code reviews and community discussions -4. Be nominated by an existing maintainer -5. Be approved by consensus of existing maintainers - -## Maintainer Responsibilities - -- Reviewing and merging pull requests -- Managing releases -- Triaging issues -- Enforcing code standards -- Mentoring new contributors -- Participating in decision-making - -## Maintainer Expectations - -- Respond to issues and PRs in a timely manner -- Follow the code of conduct -- Be transparent in decision-making -- Communicate clearly and respectfully - ---- - -*Last updated: 2026-07-18* diff --git a/MAINTAINERS.md b/MAINTAINERS.adoc similarity index 100% rename from MAINTAINERS.md rename to MAINTAINERS.adoc From 8deb00974d1ec8b4dae38f078f9a611cf648065d Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Thu, 30 Jul 2026 23:47:17 +0100 Subject: [PATCH 2/3] fix: enforce MAINTAINERS.adoc --- scripts/validate-docs.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/validate-docs.sh b/scripts/validate-docs.sh index 665a8c3..a875872 100755 --- a/scripts/validate-docs.sh +++ b/scripts/validate-docs.sh @@ -7,7 +7,7 @@ required=( SECURITY.md CONTRIBUTING.md CODE_OF_CONDUCT.md - MAINTAINERS.md + MAINTAINERS.adoc GOVERNANCE.adoc CHANGELOG.md ) @@ -24,9 +24,9 @@ if [[ "$missing" -ne 0 ]]; then exit 1 fi -if grep -R -nE "\b(TODO|TBD|To be added)\b" README.adoc CONTRIBUTING.md GOVERNANCE.adoc MAINTAINERS.md SECURITY.md CODE_OF_CONDUCT.md CHANGELOG.md >/dev/null; then +if grep -R -nE "\b(TODO|TBD|To be added)\b" README.adoc CONTRIBUTING.md GOVERNANCE.adoc MAINTAINERS.adoc SECURITY.md CODE_OF_CONDUCT.md CHANGELOG.md >/dev/null; then echo "placeholder content detected (TODO/TBD/To be added)." >&2 - grep -R -nE "\b(TODO|TBD|To be added)\b" README.adoc CONTRIBUTING.md GOVERNANCE.adoc MAINTAINERS.md SECURITY.md CODE_OF_CONDUCT.md CHANGELOG.md || true + grep -R -nE "\b(TODO|TBD|To be added)\b" README.adoc CONTRIBUTING.md GOVERNANCE.adoc MAINTAINERS.adoc SECURITY.md CODE_OF_CONDUCT.md CHANGELOG.md || true exit 1 fi From 1abeed8a78aa3432f972f3c89bf17b3b45ff7ae4 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Thu, 13 Aug 2026 05:26:04 +0100 Subject: [PATCH 3/3] fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3e87a5923fdf329 Part of estate-wide standards#426 remediation - Batch 13 SHA update. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe --- .github/workflows/hypatia-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 013c95a..db7320f 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -26,5 +26,5 @@ permissions: jobs: hypatia: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329 secrets: inherit \ No newline at end of file