Dotta f32b76f213 fix: replace third-party action with gh CLI for lockfile PR creation ... Replace peter-evans/create-pull-request with plain gh CLI commands to avoid third-party supply chain risk. Uses only GitHub's own tooling (GITHUB_TOKEN + gh CLI) to create the lockfile refresh PR. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-09 07:26:31 -05:00
..
pr-policy.yml	fix: convert lockfile refresh to PR-based flow for protected master	2026-03-09 07:22:34 -05:00
pr-verify.yml	ci: remove unnecessary full-history checkout	2026-03-06 21:40:05 -03:00
refresh-lockfile.yml	fix: replace third-party action with gh CLI for lockfile PR creation	2026-03-09 07:26:31 -05:00