Skip to content

Add security policy, code of conduct, and GitHub templates - #64

Merged
tomaj merged 1 commit into
masterfrom
chore/repo-hygiene
Oct 12, 2026
Merged

Add security policy, code of conduct, and GitHub templates#64
tomaj merged 1 commit into
masterfrom
chore/repo-hygiene

Conversation

@tomaj

@tomaj tomaj commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Summary

  • Add a security policy for 6.x and for 5.x until 6.0 is released. Older lines are unsupported. Reports go through GitHub private vulnerability reporting, with email as a backup, acknowledgement within 14 days, and coordinated disclosure through a GitHub Security Advisory and the CHANGELOG.
  • Replace the Contributor Covenant 1.2 conduct file with version 2.1.
  • Add bug and feature issue forms, a pull request template, and weekly grouped Dependabot updates for Composer and GitHub Actions.
  • Replace the outdated contributing guide and point the README at the new policy and code of conduct.

No library code or CI workflows are changed.

Test plan

  • Confirm GitHub shows the security policy, code of conduct, issue forms, and pull request template
  • Existing CI on this pull request stays green

@tomaj
Add security policy, code of conduct, and GitHub templates
f6cd814 
Document 5.x support until 6.0, private vulnerability reporting, and
Contributor Covenant 2.1. Add issue forms, a pull request template,
and weekly grouped Dependabot updates.
@tomaj tomaj self-assigned this Oct 12, 2026
@tomaj
tomaj merged commit d3c5c83 into master Oct 12, 2026
12 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@tomaj tomaj

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tomaj