Issues

• fix(managed-files-guard): drop the caller checkout step once ci-workflows#881 is released

  melodic-software/standards#897 · Filter by author kyle-sexton opened on Oct 27, 2026

• Align the dependabot-policy review tier with the owner rule on major updates

  area: security
  melodic-software/standards#821 · Filter by author kyle-sexton opened on Oct 20, 2026

• Add uv to the dependabot auto-merge ecosystems or record why not

  area: security
  melodic-software/standards#820 · Filter by author kyle-sexton opened on Oct 20, 2026

• Align zizmor fail-on-severity with the rest of the fleet

  area: security
  melodic-software/standards#819 · Filter by author kyle-sexton opened on Oct 20, 2026

• dependabot-policy: make Dependabot major updates wait for a human (or add a majors-hold option)

  melodic-software/standards#806 · Filter by author kyle-sexton opened on Oct 18, 2026

• chore(deps): remove smol-toml and katex overrides once markdownlint-cli2 and micromark-extension-math allow the patched versions

  area: securitydependencies
  melodic-software/standards#805 · Filter by author kyle-sexton opened on Oct 18, 2026
  1