feat(github): add OSS repository governance & supply-chain hardening - #34

Merged

SHcommit merged 17 commits into

developfrom

feature/oss-governance-hardening

Sep 5, 2026

Commits on Sep 5, 2026

chore: pin dev tooling and add a scoped ruff config

SHcommit
and
claude
committed
0e5526a
fix: resolve pre-existing ruff findings (unused imports/variable)

SHcommit
and
claude
committed
15bfc96
docs: add OSS repo governance & hardening spec and implementation plan

SHcommit
and
claude
committed
819efd1
feat(github): add label taxonomy as code

SHcommit
and
claude
committed
7b5e968
feat(github): auto-label PRs by changed path, tag new issues needs-triage

SHcommit
and
claude
committed
51af064
feat(github): convert issue templates to structured Issue Forms

SHcommit
and
claude
committed
2e8674f
feat(github): add dependabot for pip and github-actions ecosystems

SHcommit
and
claude
committed
a574e2e
ci: add lint and dependency-audit jobs; drop Python 3.9, fix pytest CVE

SHcommit
and
claude
committed
925472d
docs(ci): note dev-tool pin sync requirement in dependency-audit job

SHcommit
and
claude
committed
8edd52b
docs(github): add dormant CODEOWNERS draft (not wired to required review)

SHcommit
and
claude
committed
cc4b9bd
docs: correct stale 'still private' framing now that the repo is public

SHcommit
and
claude
committed
03e72c5
docs: reconcile §2 confirmed-facts with the public-transition correction

SHcommit
and
claude
committed
f17cc2a
fix(github): close governance hardening review gaps
SHcommit
committed
34c4c05
feat(github): add type:epic label to taxonomy
SHcommit
committed
8dc3fd9
Merge remote-tracking branch 'origin/develop' into feature/oss-governance-hardening
SHcommit
committed
3cec0f9
docs(handoff): reflect develop merge and superseded PR #17
SHcommit
committed
e8468e9
Merge remote-tracking branch 'origin/develop' into feature/oss-governance-hardening
SHcommit
committed
2d93e5f

Navigation Menu

feat(github): add OSS repository governance & supply-chain hardening - #34

feat(github): add OSS repository governance & supply-chain hardening#34
SHcommit merged 17 commits into
developfrom
feature/oss-governance-hardening

Commits on Sep 5, 2026

chore: pin dev tooling and add a scoped ruff config

fix: resolve pre-existing ruff findings (unused imports/variable)

docs: add OSS repo governance & hardening spec and implementation plan

feat(github): add label taxonomy as code

feat(github): auto-label PRs by changed path, tag new issues needs-triage

feat(github): convert issue templates to structured Issue Forms

feat(github): add dependabot for pip and github-actions ecosystems

ci: add lint and dependency-audit jobs; drop Python 3.9, fix pytest CVE

docs(ci): note dev-tool pin sync requirement in dependency-audit job

docs(github): add dormant CODEOWNERS draft (not wired to required review)

docs: correct stale 'still private' framing now that the repo is public

docs: reconcile §2 confirmed-facts with the public-transition correction

fix(github): close governance hardening review gaps

feat(github): add type:epic label to taxonomy

Merge remote-tracking branch 'origin/develop' into feature/oss-governance-hardening

docs(handoff): reflect develop merge and superseded PR #17

Merge remote-tracking branch 'origin/develop' into feature/oss-governance-hardening