Merge pull request #179 from aicodingstack/codex/dependabot-pnpm-hardening

fix(deps): align Dependabot with pnpm policy

Author: ericyangpan

.agents/skills/manifest-automation/scripts/automate.mjs

@@ -176,4 +176,4 @@ console.log('')
 console.log('✅ Ready. The helper prepared instructions; it did not browse or edit files.')
 console.log('')
 
-export { type as manifestType, name as manifestName, mode as operationMode }
+export { mode as operationMode, name as manifestName, type as manifestType }

.claude/skills/manifest-automation/scripts/automate.mjs

@@ -188,4 +188,4 @@ console.log('⚠️  IMPORTANT: After saving the manifest, remember to update gi
 console.log('')
 
 // Export helper function for Claude to use in manifest-automation skill
-export { updateGithubStarsEntry, type as manifestType, name as manifestName, mode as operationMode }
+export { mode as operationMode, name as manifestName, type as manifestType, updateGithubStarsEntry }

.github/dependabot.yml

@@ -8,11 +8,11 @@ updates:
       day: "monday"
       time: "06:00"
       timezone: "UTC"
+    cooldown:
+      default-days: 3
     open-pull-requests-limit: 10
     reviewers:
       - "aicodingstack/maintainers"
-    assignees:
-      - "aicodingstack/maintainers"
     commit-message:
       prefix: "chore(deps)"
       include: "scope"
@@ -60,6 +60,10 @@ updates:
         update-types:
           - "minor"
           - "patch"
+    ignore:
+      - dependency-name: "@types/node"
+        versions:
+          - ">=23"
 
   # GitHub Actions
   - package-ecosystem: "github-actions"

biome.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.3.13/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.5.6/schema.json",
   "vcs": {
     "enabled": true,
     "clientKind": "git",

cspell.json

@@ -67,6 +67,7 @@
     "Zekâsı",
     "zcode",
     "xhigh",
+    "personalizer",
     "Anthropics",
     "BYOK",
     "Codestral",