Dotta f32b76f213 fix: replace third-party action with gh CLI for lockfile PR creation ...

Replace peter-evans/create-pull-request with plain gh CLI commands to
avoid third-party supply chain risk. Uses only GitHub's own tooling
(GITHUB_TOKEN + gh CLI) to create the lockfile refresh PR.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-09 07:26:31 -05:00

..

pr-policy.yml

fix: convert lockfile refresh to PR-based flow for protected master

2026-03-09 07:22:34 -05:00

pr-verify.yml

ci: remove unnecessary full-history checkout

2026-03-06 21:40:05 -03:00

refresh-lockfile.yml

fix: replace third-party action with gh CLI for lockfile PR creation

2026-03-09 07:26:31 -05:00