Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 0 additions & 3 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,6 @@ updates:
time: "08:00"
timezone: "UTC"
open-pull-requests-limit: 5
labels:
- dependencies
- github-actions
commit-message:
prefix: chore
include: scope
Expand Down
48 changes: 48 additions & 0 deletions .quirk/evidence/dependabot-labels-8d6c0ae99d9f.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
{
"schema_version": "evidence-receipt.v1",
"receipt_id": "qreceipt.dependabot-labels.8d6c0ae99d9f",
"repository": "Quirk-Systems/.github",
"status": "verified",
"subject": {
"base_commit": "4139373b697ee33d159d103feff01da29adc9819",
"commit": "8d6c0ae99d9f1d1b42df3648693b3152fbff6252",
"changed_paths": [
".github/dependabot.yml"
]
},
"claims": [
{
"claim_id": "qclaim.dependabot-labels.8d6c0ae99d9f",
"claim_type": "evidence",
"authority_effect": "none",
"statement": "Removes the two unavailable explicit labels from Dependabot configuration while retaining the GitHub Actions update schedule and grouping; does not establish hosted Dependabot execution or repository label state.",
"evidence_paths": [
".github/dependabot.yml"
]
}
],
"artifacts": [
{
"path": ".github/dependabot.yml",
"state": "present",
"git_blob": "acdc1ff545a67954726d5e69686e7cc184360471",
"sha256": "sha256:fa8f1ff5aa8ab47a8159b85858fb5456c72001acc3b51d0378648aa1e1e8b9ed"
}
],
"verification": {
"commands": [
{
"command": "scripts/validate.sh",
"result": "pass",
"exit_code": 0
}
],
"verified_at": "2026-10-04T09:32:07Z"
},
"authority": {
"admission_effect": "none",
"authority_ref": null
},
"correction": null,
"receipt_sha256": "sha256:349080e9c2d3fe449a0c525b55f5026ed0c0e9bf73a5dc520eb684618f1dc93c"
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,66 @@
{
"schema_version": "evidence-receipt.v1",
"receipt_id": "qreceipt.dependabot-labels-current-main.2bbf96193fd2",
"repository": "Quirk-Systems/.github",
"status": "verified",
"subject": {
"base_commit": "eb889adf3009951de873890103199600f4aad20f",
"commit": "2bbf96193fd296014b917836af8850414736b532",
"changed_paths": [
".github/dependabot.yml",
".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json"
]
},
"claims": [
{
"claim_id": "qclaim.dependabot-labels-current-main.2bbf96193fd2",
"claim_type": "evidence",
"authority_effect": "none",
"statement": "Reuses PR 47 on current main: removes only the explicit Dependabot labels override and preserves its original receipt. All other Dependabot configuration bytes and workflow security controls are unchanged. Stored-receipt validation passed. Full scripts/validate.sh ran 233 tests with 232 passing and one pre-existing stale living-document failure, identical on base main; the full pipeline is not claimed as passing. Hosted checks and post-change Dependabot behavior are not established.",
"evidence_paths": [
".github/dependabot.yml",
".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json"
]
}
],
"artifacts": [
{
"path": ".github/dependabot.yml",
"state": "present",
"git_blob": "acdc1ff545a67954726d5e69686e7cc184360471",
"sha256": "sha256:fa8f1ff5aa8ab47a8159b85858fb5456c72001acc3b51d0378648aa1e1e8b9ed"
},
{
"path": ".quirk/evidence/dependabot-labels-8d6c0ae99d9f.json",
"state": "present",
"git_blob": "f03005c9f0e1e6c97190fd9f8792016ee6e02935",
"sha256": "sha256:e86d3162da8872fe1179d2c38043a7c01b5f75ec8c42059818a58c83df384fa6"
}
],
"verification": {
"commands": [
{
"command": "python3 scripts/validate_evidence_receipts.py --repository Quirk-Systems/.github --root . --receipts .quirk/evidence",
"result": "pass",
"exit_code": 0
},
{
"command": "git diff --check eb889adf3009951de873890103199600f4aad20f..2bbf96193fd296014b917836af8850414736b532",
"result": "pass",
"exit_code": 0
},
{
"command": "git diff --exit-code eb889adf3009951de873890103199600f4aad20f 2bbf96193fd296014b917836af8850414736b532 -- .github/workflows",
"result": "pass",
"exit_code": 0
}
],
"verified_at": "2026-10-30T04:41:45Z"
},
"authority": {
"admission_effect": "none",
"authority_ref": null
},
"correction": null,
"receipt_sha256": "sha256:cc31f8b4b9c5a9905f910750b0fb22aada78f8d12d2e9c4a2dd937cd70e0b0b5"
}
Loading