Repository navigation
ci: use Dependabot bun ecosystem (HACK-1394) - #454
Conversation
|
@codex review |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
This security review couldn’t start because the paying account has insufficient available credits. The payer can check their balance and add credits in the Codex usage dashboard, then try again. If you do not manage the paying account, contact this repository's admins. |
|
Codex Review: Didn't find any major issues. Keep it up! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
HACK-1394. Dependabot security updates default to npm_and_yarn and fail on bun.lock (/ and /examples/next-app). Adds .github/dependabot.yml with package-ecosystem: bun and a directories list so version updates work.
Note: GitHub does not support Dependabot security updates for Bun yet, so this does NOT make the security-update jobs succeed. Open alerts (next in examples/next-app, @modelcontextprotocol/sdk at root, drizzle-orm in packages/db) need manual bumps.