Dotta f32b76f213 fix: replace third-party action with gh CLI for lockfile PR creation ...

Replace peter-evans/create-pull-request with plain gh CLI commands to
avoid third-party supply chain risk. Uses only GitHub's own tooling
(GITHUB_TOKEN + gh CLI) to create the lockfile refresh PR.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-09 07:26:31 -05:00

..

workflows

fix: replace third-party action with gh CLI for lockfile PR creation

2026-03-09 07:26:31 -05:00