omry / omegaconf / 751ec31e-b5ac-4531-ba5d-d927067491e7

100%

master: 100%

push

circleci

Add annual best-effort documentation dependency maintenance (#1392)

## Motivation

Handle documentation dependency findings in one annual best-effort upgrade drive instead of continuous update PRs. A generic npm audit runs January 30 at 02:00 UTC or manually, proposes upgrades, attempts installation/build, and creates or updates one draft umbrella PR with unresolved findings and failures reported honestly.

Routine website Dependabot update PRs and npm installation audit messages are suppressed. The build job has read-only permissions and no persisted checkout credentials; a separate job publishes only the manifest, lockfile and report. No automatic merging is included.

### Have you read the Contributing Guidelines on pull requests?

Yes.

### For any non-trivial change: is there an issue or design discussion where maintainers agreed on the direction?

Maintainer-directed implementation: #1391.

## Test Plan

- Focused tests: 8 passed.
- Full Python suite: 8,761 passed, 362 skipped.
- Ruff lint/format, Pyrefly repository/script and actionlint passed.
- An isolated live npm audit completed dependency resolution, installation and the production website build, retaining unresolved findings in its report.
- Independent full review before checkpoint commit.

Activation requires enabling Actions PR creation and configuring the native Dependabot dismissal rule for `website/package-lock.json` in GitHub's UI. Current alerts #7 and #8 are individually dismissed as accepted risk; future alert suppression is not active yet. Run the new workflow manually once after activation; dormant public repositories may need scheduled workflows re-enabled.

Developer maintenance only; no release fragment.

## Fixes

Fixes #1391.

## Related PRs

None. The workflow and script can be copied into other repositories with their npm project path configured; this PR changes OmegaConf only.

99 of 99 new or added lines in 1 file covered. (100.0%)

5074 of 5074 relevant lines covered (100.0%)

1.0 hits per line