From b680cb93a0ca12ecfef4d587a6bdf97b358d7a75 Mon Sep 17 00:00:00 2001
From: mkilijanek <mkilijanek@users.noreply.github.com>
Date: Mon, 23 Feb 2026 18:35:42 +0100
Subject: [PATCH] fix: workflow cleanup and security overrides on master

- Remove non-existent 'develop' branch from CodeQL and dependency-review triggers
- Fix invalid template expression in dependabot.yml assignees (use literal username)
- Add npm overrides for pbkdf2 and sha.js security patches

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/dependabot.yml                  | 2 +-
 .github/workflows/codeql-analysis.yml   | 2 --
 .github/workflows/dependency-review.yml | 1 -
 package.json                            | 4 ++++
 4 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 54694136..fd48e42e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -43,7 +43,7 @@ updates:
 
     # Assignees
     assignees:
-      - "${{ github.repository_owner }}"
+      - "mkilijanek"
 
     # Reviewers (customize as needed)
     # reviewers:
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index ff3c2b41..2579728e 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -5,12 +5,10 @@ on:
     branches:
       - main
       - master
-      - develop
   pull_request:
     branches:
       - main
       - master
-      - develop
   schedule:
     # Run at 4 AM UTC every Monday
     - cron: '0 4 * * 1'
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 28f072fb..b91b1ae0 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -5,7 +5,6 @@ on:
     branches:
       - main
       - master
-      - develop
     paths:
       - 'package.json'
       - 'package-lock.json'
diff --git a/package.json b/package.json
index 428924d2..740af947 100644
--- a/package.json
+++ b/package.json
@@ -213,6 +213,10 @@
     "security:triage:json": "node scripts/vulnerability-triage.js --json",
     "security:check": "npm run security:triage && npm run lint"
   },
+  "overrides": {
+    "pbkdf2": "^3.1.5",
+    "sha.js": "^2.4.12"
+  },
   "engines": {
     "node": ">=24"
   }