chore(deps): update actions/checkout action to v6

chore(config): migrate Renovate config (#3 )
Auto-merge: Renovate config migration (matchPackagePrefixes -> matchPackageNames).
2026-05-10 12:33:06 +00:00 · 2026-05-09 15:46:45 +00:00 · 2026-05-09 15:41:56 +00:00 · 2026-05-09 10:32:11 +00:00 · 2026-05-09 10:32:11 +00:00 · 2026-05-09 10:32:11 +00:00
5 changed files with 22 additions and 7 deletions
@@ -0,0 +1,13 @@
+name: Security
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  schedule:
+    - cron: '0 6 * * 1'
+  workflow_dispatch:
+
+jobs:
+  scan:
+    uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
+
@@ -16,7 +16,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Projektstruktur prüfen
        run: |
@@ -15,7 +15,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Extract version from tag
        id: version
@@ -20,7 +20,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
@@ -36,7 +36,7 @@ jobs:
    if: github.event_name == 'pull_request'
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Dependency Review
        uses: actions/dependency-review-action@v4
@@ -26,8 +26,10 @@
      },
      {
        "description": "TypeScript type definitions stay grouped with each other",
-        "matchPackagePrefixes": ["@types/"],
-        "groupName": "type definitions"
+        "groupName": "type definitions",
+        "matchPackageNames": [
+          "@types/{/,}**"
+        ]
      },
      {
        "description": "Dev dependencies in their own group",
Author	SHA1	Message	Date
renovate-bot	a94d765cca	chore(deps): update actions/checkout action to v6 Security / scan (pull_request) Successful in 33s Details	2026-05-10 12:33:06 +00:00
JonKazama-Hellion	0d4708bf11	chore(config): migrate Renovate config (#3 ) Security / scan (push) Successful in 27s Details Auto-merge: Renovate config migration (matchPackagePrefixes -> matchPackageNames).	2026-05-09 15:46:45 +00:00
renovate-bot	f2b070e201	chore(config): migrate config renovate.json Security / scan (pull_request) Successful in 24s Details	2026-05-09 15:41:56 +00:00
JonKazama-Hellion	8176f91d4c	Merge pull request 'chore: Configure Renovate' (#1 ) from renovate/configure into master Security / scan (push) Successful in 17s Details Reviewed-on: #1	2026-05-09 10:32:11 +00:00
JonKazama-Hellion	d68bb35e7a	renovate.json aktualisiert Signed-off-by: Jon Kazama <kontakt@hellion-media.de>	2026-05-09 10:32:11 +00:00
renovate-bot	10c70f8bf9	Add renovate.json	2026-05-09 10:32:11 +00:00
JonKazama-Hellion	28b9061756	chore: add reusable security scan workflow Security / scan (push) Failing after 11s Details Calls JonKazama-Hellion/security-workflows for Semgrep SAST + Trivy filesystem vulnerability scan. Runs on push to main/master, on every PR, and weekly Monday 06:00 UTC.	2026-05-09 11:28:10 +02:00