[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_81":-5,"_227":228,"_229":152,"_230":231,"_232":65},"routes/repo/layout",{"_129":65,"_94":130,"_131":132,"_133":134,"_135":136,"_137":65,"_138":-5,"_139":140,"_141":65,"_142":143,"_144":-5},"routes/repo/blob",{"_11":12,"_13":-5,"_14":15,"_16":17,"_18":-5},"blob",{"_94":95,"_96":59,"_97":98,"_99":100,"_101":102},"html","blame",{"_14":47,"_48":49},"branches",[19,20,21,22,23,24,25,26,27],"codeowners",{"_28":45,"_30":46},{"_28":43,"_30":44},{"_28":41,"_30":42},{"_28":39,"_30":40},{"_28":37,"_30":38},{"_28":35,"_30":36},{"_28":34,"_30":33},{"_28":32,"_30":33},{"_28":29,"_30":31},"name","workspace-model-choice","hash","ca7abc1ce53ed8d310f2bfd5978c0f399c9069be","webhooks","54e033056cc05bc85dc56a90780ee497c2ed4ad7","slide-speed","model-catalog","332205d1cca1e256e4e1488e589d278ca0e91901","immaculate","53f99fd5e5f81a2813e2cd262713c8bc00c0aa45","commit-trailers","90140b68a353ec9d42215ebc393b445d4ce22f04","agents-as-a-team","72adc08e6c7341a9fd1778da280d70c37cc6b4de","account-settings","cafce4460aa85919ff8d678b27a67fdf803b6f58","main","46b48beed6a2f35707e4c476fb2256649101ecbf",{"_58":59,"_60":61,"_62":63,"_64":65},"lines",[50,51,52,53,54,55,56,57],"# tokio-rs/tokio's .github/dependabot.yml, as published.","version: 2","updates:"," - package-ecosystem: \"github-actions\""," directory: \"/\""," schedule:"," interval: \"weekly\""," open-pull-requests-limit: 10","head","c6bd8957696014da8946966085efd2fdd45d2ee5","ranges",[88],"commits",[66],"partial",false,{"_30":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":79},"810cd7660b7cbf3e4d7500576a7c809b868f73ca","treeHash","62ebf5cddc33e9f2e7e32f3b225a6fcb74dd9e8d","message","Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar\n\nFive workstreams built in parallel and merged together (deployed 2026-10-08).\n\nTeams and CODEOWNERS\n- Workspace teams: visible or secret, nested up to 8 levels (children inherit\n repository roles), maintainers and members, notify-on-mention, review\n assignment (round robin or load balance, count, skip busy, exclusions).\n Team repository roles are repo_grants with principal_kind 'team', folded\n into each person's effective role (highest wins), shown as \"via team X\".\n- @workspace/team mentions (inbox reason team_mention) and autocomplete;\n team review requests (pull.review_requested carries teams and code owners).\n- CODEOWNERS read from the base branch: .g1t/, .github/, root, docs/,\n .gitlab/ (first found). gitignore-style patterns, last match wins, people,\n teams and emails as owners, sections with optional and N-approval rules.\n Owners are asked to review; errors with line numbers on the blob page,\n Settings > Branches, a g1t / codeowners status and REST. \"Require review\n from code owners\" gates the merge button, API, auto-merge and the queue\n for people and agents alike; @g1t counts only where the file names it.\n- Pages //-/teams (list, new, members, child teams, repositories,\n settings); REST, MCP team tool, webhooks and audit log.\n- identity 0027_teams, work 0026_code_owners.\n\nLabels, milestones, pull requests into any branch\n- Labels per repository (defaults, colours, labels page, pickers, filters),\n milestones (list, page with progress), a base branch chosen on open or\n changed later; merge, catch-up, mergeability and @g1t work use it.\n Branch protection applies to pull requests into the default branch.\n- 14 REST/MCP operations; issue/pull labeled, unlabeled, milestoned,\n demilestoned and pull.base_changed events (webhooks and workflows).\n- work 0027_labels_milestones_bases.\n\nDependency updates: dependabot.yml, version 2\n- Read from .g1t/dependabot.yml, then .github/dependabot.yml, unchanged;\n every option parsed and validated (unknown keys are errors), ecosystems\n g1t cannot update yet are accepted and listed. Version update pull\n requests for npm (npm, pnpm, yarn), cargo, gomod and pip (incl. poetry)\n on each entry's schedule, grouped, limited, with commit-message,\n branch-name, labels, milestone, target-branch, reviewers and assignees;\n security updates follow the same file; Dependabot's comment commands\n addressed to @g1t. Its own Security tab. security 0004_version_updates.\n\nSecurity suite and the Security and quality activation\n- Custom secret patterns (linear-time regex, limits, dry run), push\n protection bypass with reasons and delegated approval, validity checks\n for issuers with a safe read-only endpoint, alert pages.\n- Code scanning: SARIF 2.1.0 upload, fingerprints, fixed detection, a\n starter workflow (Bandit, gosec, ESLint + eslint-plugin-security, clippy\n via clippy-sarif), PR statuses and comments, Fix with g1t.\n- Dependency graph, SPDX 2.3 SBOM, dependency review on pull requests,\n workspace security overview, repository Security tabs.\n- Security and quality activation ($10/month via the price book; free for\n public repositories and for the free core). REST, MCP security tool,\n webhooks, inbox notices. security 0005_security_suite, billing\n 0037_security_activation.\n\nAlso\n- Top bar: the New button is a compact \"+\" Create new menu (with New team);\n search lives in the sidebar (\"Search or jump to\", the palette), with a\n magnifier on phones; docs updated.\n- repos read_file: the store answers a missing path with NOT_FOUND; it is\n remembered as absent for 10 minutes instead of failing.\n- The pull request page reads PullDetail's snake_case fields again\n (required checks, earlier checks, review pending).\n- A dependency-review arm that the version-update arm made unreachable is\n merged into one.","parents",[87],"authoredAt","2026-10-08T02:44:53.000Z","author",{"_80":81,"_28":82,"_83":84,"_85":86},"coAuthors",[],"kind","user","Chase Pierce","username","syntaqx","avatar","0382c96e4098ff96d3fe16b8b3016a99592e29102a41abb9b9d594ae1f7c3e7e","a11c093a2ff44167a640ae1d4b3e917ab62462c3",{"_89":90,"_91":92,"_93":67},"start",1,"end",8,"commit","repo",{"_103":104,"_105":106,"_28":107,"_108":109,"_110":65,"_111":112,"_113":45,"_114":-5,"_115":65,"_116":117,"_118":119,"_120":121,"_122":-5},"ref","path","services/security/fixtures/dependabot/tokio-rs_tokio.yml","size",208,"text","# tokio-rs/tokio's .github/dependabot.yml, as published.\nversion: 2\nupdates:\n - package-ecosystem: \"github-actions\"\n directory: \"/\"\n schedule:\n interval: \"weekly\"\n open-pull-requests-limit: 10\n","id","rep_01m3xbtsaz9s2ymajszkfqwhk5","namespace","flagon-io","g1t","description","Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.","isPrivate","ownerId","usr_b51a1a09fc53e9471cbe1426b7","defaultBranch","forkOf","protected","createdAt","2026-10-02T03:51:51.000Z","topics",[123,124,125,126,127,128],"website","https://g1t.sh","archivedAt","git","agents","cloudflare","rust","forge","mcp","welcome",{"_103":104,"_105":106,"_28":107,"_108":109,"_110":65,"_111":112,"_113":45,"_114":-5,"_115":65,"_116":117,"_118":226,"_120":121,"_122":-5},"project",{"_103":171,"_172":106,"_173":107,"_28":107,"_108":109,"_174":152,"_175":176,"_177":65,"_178":65,"_179":152,"_180":181,"_80":182,"_183":184,"_185":186,"_187":121,"_188":189,"_190":191,"_192":193,"_194":107,"_116":195,"_196":197,"_198":199,"_200":201},"open",{"_168":169,"_170":90},"access",{"_147":148,"_149":65,"_150":151},"member","watching","stars",{"_145":65,"_139":146},"signedIn","mirrorBriefs",[],"pinned","starred",0,"role","read","insider","can",{"_148":152,"_153":152,"_154":65,"_155":65,"_156":65,"_157":65,"_158":65,"_159":65,"_160":65,"_161":65,"_162":65,"_163":65,"_164":65,"_165":65,"_166":65,"_167":65},true,"participate","triage","push","merge","manage_labels","security_alerts","run","manage_settings","manage_protection","manage_security","manage_integrations","manage_access","administer","change_visibility","delete","issues",5,"pulls","prj_01m44n0f16e16swhnbgyp7eyfc","workspace","slug","descriptionInherited","source",{"_80":221,"_222":104,"_94":223,"_224":225,"_113":45},"private","archived","primary","setting",{"_80":182,"_185":186},"app","kindReason",{"_215":219,"_217":220},"runs","elsewhere","productionUrl","detected",{"_80":182,"_213":214},"ecosystem","cargo","links",{"_202":121,"_203":65,"_204":205,"_206":207},"createdBy","2026-10-04T23:46:55.654Z","updatedAt","2026-10-08T06:42:33.021Z","pushedAt","2026-10-09T23:34:26.709Z","activity",74.34249646593021,"homepage","homepageInherited","docs","https://docs.g1t.sh","custom",[208],{"_209":210,"_211":212},"label","Status","url","https://status.g1t.sh","reason",{"_215":216,"_217":218},"by","default","detail","Nothing in it says what it is, so it is taken to be an app.","set","Set in its settings: an app.","hosted","repoId",{"_105":106,"_28":107},"rootDir","",[123,124,125,126,127,128],"shell",{"_172":-5,"_241":242,"_94":243,"_244":-5,"_245":-5},"inviteOnly","addresses",{"_233":121,"_234":235,"_236":237,"_128":238,"_239":240},"analyticsConsent","site","usercontent","https://g1tusercontent.com","api","https://api.g1t.sh","https://mcp.g1t.sh","og","https://og.g1t.sh","repos",[],{"_105":106,"_28":107,"_137":65,"_168":169,"_170":90},"limit","monthUsageMicros"]

Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar1d ago	1	# tokio-rs/tokio's .github/dependabot.yml, as published.
	2	version: 2
	3	updates:
	4	- package-ecosystem: "github-actions"
	5	directory: "/"
	6	schedule:
	7	interval: "weekly"
	8	open-pull-requests-limit: 10

flagon-io/g1t