From 9a2bbf7c5c20e343e2a77b2d82ba3664df9534f4 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sun, 4 Oct 2026 09:29:04 +0000 Subject: [PATCH 1/4] Initial plan From 8d6c0ae99d9f1d1b42df3648693b3152fbff6252 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sun, 4 Oct 2026 09:30:21 +0000 Subject: [PATCH 2/4] chore(dependabot): stop requesting unavailable labels Co-authored-by: bryansayler <207279+bryansayler@users.noreply.github.com> --- .github/dependabot.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index adad271..acdc1ff 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,9 +10,6 @@ updates: time: "08:00" timezone: "UTC" open-pull-requests-limit: 5 - labels: - - dependencies - - github-actions commit-message: prefix: chore include: scope From 0582cabca533a1617c8087962e9a924178ab5665 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sun, 4 Oct 2026 09:32:24 +0000 Subject: [PATCH 3/4] docs(evidence): bind dependabot label fix to 8d6c0ae99d9f Co-authored-by: bryansayler <207279+bryansayler@users.noreply.github.com> --- .../dependabot-labels-8d6c0ae99d9f.json | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 .quirk/evidence/dependabot-labels-8d6c0ae99d9f.json diff --git a/.quirk/evidence/dependabot-labels-8d6c0ae99d9f.json b/.quirk/evidence/dependabot-labels-8d6c0ae99d9f.json new file mode 100644 index 0000000..f03005c --- /dev/null +++ b/.quirk/evidence/dependabot-labels-8d6c0ae99d9f.json @@ -0,0 +1,48 @@ +{ + "schema_version": "evidence-receipt.v1", + "receipt_id": "qreceipt.dependabot-labels.8d6c0ae99d9f", + "repository": "Quirk-Systems/.github", + "status": "verified", + "subject": { + "base_commit": "4139373b697ee33d159d103feff01da29adc9819", + "commit": "8d6c0ae99d9f1d1b42df3648693b3152fbff6252", + "changed_paths": [ + ".github/dependabot.yml" + ] + }, + "claims": [ + { + "claim_id": "qclaim.dependabot-labels.8d6c0ae99d9f", + "claim_type": "evidence", + "authority_effect": "none", + "statement": "Removes the two unavailable explicit labels from Dependabot configuration while retaining the GitHub Actions update schedule and grouping; does not establish hosted Dependabot execution or repository label state.", + "evidence_paths": [ + ".github/dependabot.yml" + ] + } + ], + "artifacts": [ + { + "path": ".github/dependabot.yml", + "state": "present", + "git_blob": "acdc1ff545a67954726d5e69686e7cc184360471", + "sha256": "sha256:fa8f1ff5aa8ab47a8159b85858fb5456c72001acc3b51d0378648aa1e1e8b9ed" + } + ], + "verification": { + "commands": [ + { + "command": "scripts/validate.sh", + "result": "pass", + "exit_code": 0 + } + ], + "verified_at": "2026-10-04T09:32:07Z" + }, + "authority": { + "admission_effect": "none", + "authority_ref": null + }, + "correction": null, + "receipt_sha256": "sha256:349080e9c2d3fe449a0c525b55f5026ed0c0e9bf73a5dc520eb684618f1dc93c" +} From 303d201e88f7622afe7bace65b6a4eeaa22b2c77 Mon Sep 17 00:00:00 2001 From: Bryan Sayler <207279+bryansayler@users.noreply.github.com> Date: Thu, 29 Oct 2026 23:41:59 -0500 Subject: [PATCH 4/4] docs(evidence): bind dependabot label fix to current main --- ...abot-labels-current-main-2bbf96193fd2.json | 66 +++++++++++++++++++ 1 file changed, 66 insertions(+) create mode 100644 .quirk/evidence/dependabot-labels-current-main-2bbf96193fd2.json diff --git a/.quirk/evidence/dependabot-labels-current-main-2bbf96193fd2.json b/.quirk/evidence/dependabot-labels-current-main-2bbf96193fd2.json new file mode 100644 index 0000000..4302692 --- /dev/null +++ b/.quirk/evidence/dependabot-labels-current-main-2bbf96193fd2.json @@ -0,0 +1,66 @@ +{ + "schema_version": "evidence-receipt.v1", + "receipt_id": "qreceipt.dependabot-labels-current-main.2bbf96193fd2", + "repository": "Quirk-Systems/.github", + "status": "verified", + "subject": { + "base_commit": "eb889adf3009951de873890103199600f4aad20f", + "commit": "2bbf96193fd296014b917836af8850414736b532", + "changed_paths": [ + ".github/dependabot.yml", + ".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json" + ] + }, + "claims": [ + { + "claim_id": "qclaim.dependabot-labels-current-main.2bbf96193fd2", + "claim_type": "evidence", + "authority_effect": "none", + "statement": "Reuses PR 47 on current main: removes only the explicit Dependabot labels override and preserves its original receipt. All other Dependabot configuration bytes and workflow security controls are unchanged. Stored-receipt validation passed. Full scripts/validate.sh ran 233 tests with 232 passing and one pre-existing stale living-document failure, identical on base main; the full pipeline is not claimed as passing. Hosted checks and post-change Dependabot behavior are not established.", + "evidence_paths": [ + ".github/dependabot.yml", + ".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json" + ] + } + ], + "artifacts": [ + { + "path": ".github/dependabot.yml", + "state": "present", + "git_blob": "acdc1ff545a67954726d5e69686e7cc184360471", + "sha256": "sha256:fa8f1ff5aa8ab47a8159b85858fb5456c72001acc3b51d0378648aa1e1e8b9ed" + }, + { + "path": ".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json", + "state": "present", + "git_blob": "f03005c9f0e1e6c97190fd9f8792016ee6e02935", + "sha256": "sha256:e86d3162da8872fe1179d2c38043a7c01b5f75ec8c42059818a58c83df384fa6" + } + ], + "verification": { + "commands": [ + { + "command": "python3 scripts/validate_evidence_receipts.py --repository Quirk-Systems/.github --root . --receipts .quirk/evidence", + "result": "pass", + "exit_code": 0 + }, + { + "command": "git diff --check eb889adf3009951de873890103199600f4aad20f..2bbf96193fd296014b917836af8850414736b532", + "result": "pass", + "exit_code": 0 + }, + { + "command": "git diff --exit-code eb889adf3009951de873890103199600f4aad20f 2bbf96193fd296014b917836af8850414736b532 -- .github/workflows", + "result": "pass", + "exit_code": 0 + } + ], + "verified_at": "2026-10-30T04:41:45Z" + }, + "authority": { + "admission_effect": "none", + "authority_ref": null + }, + "correction": null, + "receipt_sha256": "sha256:cc31f8b4b9c5a9905f910750b0fb22aada78f8d12d2e9c4a2dd937cd70e0b0b5" +}