diff --git a/.github/dependabot.yml b/.github/dependabot.yml index adad271..acdc1ff 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,9 +10,6 @@ updates: time: "08:00" timezone: "UTC" open-pull-requests-limit: 5 - labels: - - dependencies - - github-actions commit-message: prefix: chore include: scope diff --git a/.quirk/evidence/dependabot-labels-8d6c0ae99d9f.json b/.quirk/evidence/dependabot-labels-8d6c0ae99d9f.json new file mode 100644 index 0000000..f03005c --- /dev/null +++ b/.quirk/evidence/dependabot-labels-8d6c0ae99d9f.json @@ -0,0 +1,48 @@ +{ + "schema_version": "evidence-receipt.v1", + "receipt_id": "qreceipt.dependabot-labels.8d6c0ae99d9f", + "repository": "Quirk-Systems/.github", + "status": "verified", + "subject": { + "base_commit": "4139373b697ee33d159d103feff01da29adc9819", + "commit": "8d6c0ae99d9f1d1b42df3648693b3152fbff6252", + "changed_paths": [ + ".github/dependabot.yml" + ] + }, + "claims": [ + { + "claim_id": "qclaim.dependabot-labels.8d6c0ae99d9f", + "claim_type": "evidence", + "authority_effect": "none", + "statement": "Removes the two unavailable explicit labels from Dependabot configuration while retaining the GitHub Actions update schedule and grouping; does not establish hosted Dependabot execution or repository label state.", + "evidence_paths": [ + ".github/dependabot.yml" + ] + } + ], + "artifacts": [ + { + "path": ".github/dependabot.yml", + "state": "present", + "git_blob": "acdc1ff545a67954726d5e69686e7cc184360471", + "sha256": "sha256:fa8f1ff5aa8ab47a8159b85858fb5456c72001acc3b51d0378648aa1e1e8b9ed" + } + ], + "verification": { + "commands": [ + { + "command": "scripts/validate.sh", + "result": "pass", + "exit_code": 0 + } + ], + "verified_at": "2026-10-04T09:32:07Z" + }, + "authority": { + "admission_effect": "none", + "authority_ref": null + }, + "correction": null, + "receipt_sha256": "sha256:349080e9c2d3fe449a0c525b55f5026ed0c0e9bf73a5dc520eb684618f1dc93c" +} diff --git a/.quirk/evidence/dependabot-labels-current-main-2bbf96193fd2.json b/.quirk/evidence/dependabot-labels-current-main-2bbf96193fd2.json new file mode 100644 index 0000000..4302692 --- /dev/null +++ b/.quirk/evidence/dependabot-labels-current-main-2bbf96193fd2.json @@ -0,0 +1,66 @@ +{ + "schema_version": "evidence-receipt.v1", + "receipt_id": "qreceipt.dependabot-labels-current-main.2bbf96193fd2", + "repository": "Quirk-Systems/.github", + "status": "verified", + "subject": { + "base_commit": "eb889adf3009951de873890103199600f4aad20f", + "commit": "2bbf96193fd296014b917836af8850414736b532", + "changed_paths": [ + ".github/dependabot.yml", + ".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json" + ] + }, + "claims": [ + { + "claim_id": "qclaim.dependabot-labels-current-main.2bbf96193fd2", + "claim_type": "evidence", + "authority_effect": "none", + "statement": "Reuses PR 47 on current main: removes only the explicit Dependabot labels override and preserves its original receipt. All other Dependabot configuration bytes and workflow security controls are unchanged. Stored-receipt validation passed. Full scripts/validate.sh ran 233 tests with 232 passing and one pre-existing stale living-document failure, identical on base main; the full pipeline is not claimed as passing. Hosted checks and post-change Dependabot behavior are not established.", + "evidence_paths": [ + ".github/dependabot.yml", + ".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json" + ] + } + ], + "artifacts": [ + { + "path": ".github/dependabot.yml", + "state": "present", + "git_blob": "acdc1ff545a67954726d5e69686e7cc184360471", + "sha256": "sha256:fa8f1ff5aa8ab47a8159b85858fb5456c72001acc3b51d0378648aa1e1e8b9ed" + }, + { + "path": ".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json", + "state": "present", + "git_blob": "f03005c9f0e1e6c97190fd9f8792016ee6e02935", + "sha256": "sha256:e86d3162da8872fe1179d2c38043a7c01b5f75ec8c42059818a58c83df384fa6" + } + ], + "verification": { + "commands": [ + { + "command": "python3 scripts/validate_evidence_receipts.py --repository Quirk-Systems/.github --root . --receipts .quirk/evidence", + "result": "pass", + "exit_code": 0 + }, + { + "command": "git diff --check eb889adf3009951de873890103199600f4aad20f..2bbf96193fd296014b917836af8850414736b532", + "result": "pass", + "exit_code": 0 + }, + { + "command": "git diff --exit-code eb889adf3009951de873890103199600f4aad20f 2bbf96193fd296014b917836af8850414736b532 -- .github/workflows", + "result": "pass", + "exit_code": 0 + } + ], + "verified_at": "2026-10-30T04:41:45Z" + }, + "authority": { + "admission_effect": "none", + "authority_ref": null + }, + "correction": null, + "receipt_sha256": "sha256:cc31f8b4b9c5a9905f910750b0fb22aada78f8d12d2e9c4a2dd937cd70e0b0b5" +}