From 80e5425faa3b6c050d670b1998a4de17e1a0c6f8 Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Mon, 9 Feb 2026 16:59:14 -0500
Subject: [PATCH 1/3] ignore major for npm

---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5d35488..fc4143f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,6 +14,10 @@ updates:
       - "dependencies"
       - "npm"
     rebase-strategy: "auto"
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
 
   - package-ecosystem: "github-actions"
     directory: "/"

From 5d4dafabfcc6da3801d52297fc3a909955a14293 Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Mon, 9 Feb 2026 17:06:15 -0500
Subject: [PATCH 2/3] update dep github actions

---
 .github/workflows/tests.yaml | 31 ++++++++++++++++++-------------
 1 file changed, 18 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index aa7fea8..ab6f23f 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -10,6 +10,13 @@ on:
 env:
   retention_days: 3
 
+permissions:
+  checks: write
+  contents: read
+  pull-requests: write
+  security-events: write # required for SARIF upload
+  actions: read
+
 jobs:
   tests:
     runs-on: ubuntu-latest
@@ -103,16 +110,11 @@ jobs:
           retention-days: ${{ env.retention_days }}
       # displays in summary page
       - name: Publish Test Report
-        uses: mikepenz/action-junit-report@v3
-        if: always() # always run even if the previous step fails
-        with:
-          report_paths: 'junit.xml'
-      # more in depth junit in console and annotations on failures
-      - uses: ashley-taylor/junit-report-annotations-action@1.3
         if: always()
+        uses: EnricoMi/publish-unit-test-result-action@v2
         with:
-          access-token: ${{ secrets.GITHUB_TOKEN }}
-          path: junit.xml
+          files: junit.xml
+          check_name: Test Results
       - run: npm run test:coverage
       - name: upload code coverage
         uses: actions/upload-artifact@v4
@@ -121,16 +123,19 @@ jobs:
           path: coverage
           retention-days: ${{ env.retention_days }}
       # adds coverage comment to pr
-      - name: parse coverage
-        uses: danhunsaker/clover-reporter-action@v0.2.17-clover
+      - name: Report coverage
+        uses: dorny/test-reporter@v1
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          clover-file: ./coverage/clover.xml
+          name: Jest Coverage
+          path: coverage/clover.xml
+          reporter: clover
+          fail-on-error: false
+
 
   automerge:
     needs: tests
     name: Auto-merge PR if tests pass
-    if: (github.actor == 'dependabot[bot]' || github.actor == 'imgbot[bot]') && needs.tests.result == 'success'
+    if: (github.actor == 'dependabot[bot]' || github.actor == 'dependabot-preview[bot]' || github.actor == 'imgbot[bot]') && needs.tests.result == 'success'
     runs-on: ubuntu-latest
     steps:
       - name: Merge PR

From 9ddc143f53234e9133c575a1fee54576e889a545 Mon Sep 17 00:00:00 2001
From: lastlink <theefunk@gmail.com>
Date: Mon, 9 Feb 2026 17:43:07 -0500
Subject: [PATCH 3/3] another update

---
 .github/workflows/tests.yaml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 83d5bb3..76daa1b 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -122,14 +122,6 @@ jobs:
           name: Report-CodeCoverage
           path: coverage
           retention-days: ${{ env.retention_days }}
-      # adds coverage comment to pr
-      - name: Report coverage
-        uses: dorny/test-reporter@v1
-        with:
-          name: Jest Coverage
-          path: coverage/clover.xml
-          reporter: clover
-          fail-on-error: false
 
 
   automerge: