From 8448a69bee56343cef5e56f1cc94c9bbbaf2bcdd Mon Sep 17 00:00:00 2001
From: Manny <159727600+Droptops@users.noreply.github.com>
Date: Fri, 4 Sep 2026 22:01:19 -0700
Subject: [PATCH 1/2] ci: gate high-severity production dependency advisories

---
 .github/workflows/ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2a53ea5..709b993 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,5 +19,6 @@ jobs:
           node-version: 22
           cache: npm
       - run: npm ci
+      - run: npm audit --omit=dev --audit-level=high
       - run: npm run lint
       - run: npm run build

From 05aa547ead1dcd499be45d5bb76032b61eb1418d Mon Sep 17 00:00:00 2001
From: Manny <159727600+Droptops@users.noreply.github.com>
Date: Fri, 4 Sep 2026 22:01:24 -0700
Subject: [PATCH 2/2] chore: enable npm dependency updates

---
 .github/dependabot.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..3fce704
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    groups:
+      development-dependencies:
+        dependency-type: development
+      production-dependencies:
+        dependency-type: production