Skip to content

ci: Dependabot's PRs merge themselves; two unused names out of verify-packages.py - #14

Merged
ryan-morris merged 2 commits into
mainfrom
fix/code-scanning
Oct 15, 2026
Merged

ryan-morris merged 2 commits into
mainfrom
fix/code-scanning

Conversation

@ryan-morris

Copy link
Copy Markdown
Member
  • CI gets the dependabot-auto-merge job the other devenvy repositories have: auto-merge as devenvy-bot once result passes (the org's bot variable and secret are visible to this repository).
  • scripts/verify-packages.py: the unused json import and CPU table (CodeQL py/unused-import, py/unused-global-variable).

The other CodeQL alerts are dismissed with reasons: Path.Combine (3) only ever joins constants and runtime identifiers, and the library targets netstandard2.0, which has no Path.Join; the smoke-test app's generic catches (2) are how it turns any load or exec failure into a FAIL line.

Nothing here triggers a release (no change under src/ or to versions.json).

🤖 Generated with Claude Code

ryan-morris and others added 2 commits October 15, 2026 11:16
…-packages.py

- CI gets the dependabot-auto-merge job the other devenvy repositories have: auto-merge as devenvy-bot once the
  required result check passes.
- verify-packages.py: the unused json import and CPU table (CodeQL py/unused-import, py/unused-global-variable).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ryan-morris
ryan-morris merged commit 61821c7 into main Oct 15, 2026
65 checks passed
@ryan-morris
ryan-morris deleted the fix/code-scanning branch October 15, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant