6 commits

Author	SHA1	Message	Date
Adam Moussa	e9271c946f	ci: allow deps-dev, ui, deploy, ci, infra scopes in PR title lint (#88) ... * ci: allow deps-dev, ui, deploy, ci scopes in PR title lint Dependabot dev-dependency PRs use the deps-dev scope and humans commonly use ui/deploy/ci, none of which were in the allowed list, so lint-pr-title failed on otherwise-valid PRs. * ci: allow infra scope in PR title lint	2026-06-30 19:12:14 -04:00
dependabot[bot]	4af9eb885c	chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 (#1212) ... * chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * added deps to pr scopes --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Johannes du Plessis <johannes@langchain.dev>	2026-05-01 22:27:21 +00:00
dependabot[bot]	8ae4179378	chore(deps): bump amannn/action-semantic-pull-request from 5 to 6 (#1197) ... Bumps [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) from 5 to 6. - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](e32d7e603d...48f256284b) --- updated-dependencies: - dependency-name: amannn/action-semantic-pull-request dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-15 23:41:08 -07:00
John Kennedy	a94fb8b94c	ci: SHA-pin third-party actions in workflow files (#1193) ... Pin astral-sh/setup-uv and amannn/action-semantic-pull-request to full commit SHAs to prevent supply chain attacks via tag hijacking.	2026-04-15 23:36:07 -07:00
Brace Sproul	700bbf20f5	chore: add proper jsonwebtoken deps (#659) ... * deps: add proper jsonwebtoken deps * cr	2025-08-04 13:31:59 -07:00
Brace Sproul	1d7ddf22a5	ci: Add PR title lint workflow (#472)	2025-07-22 18:21:45 +00:00