From ca2704e10c7994d91bcff3c9de566407252bc460 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20H=C3=BCgel?= <timo.huegel@js-soft.com>
Date: Thu, 6 Aug 2026 16:46:09 +0200
Subject: [PATCH 1/4] Add dependency security maintenance

---
 .../dependency-security-maintenance.yml          | 16 ++++++++++++++++
 .nsprc                                           |  1 +
 2 files changed, 17 insertions(+)
 create mode 100644 .github/workflows/dependency-security-maintenance.yml
 create mode 100644 .nsprc

diff --git a/.github/workflows/dependency-security-maintenance.yml b/.github/workflows/dependency-security-maintenance.yml
new file mode 100644
index 0000000..3ec2267
--- /dev/null
+++ b/.github/workflows/dependency-security-maintenance.yml
@@ -0,0 +1,16 @@
+name: Dependency Security Maintenance
+
+on:
+  schedule:
+    - cron: "0 3 * * *" # every day at 03:00 UTC
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  npm-audit:
+    uses: js-soft/github-actions/.github/workflows/dependency-security-maintenance.yml@main
+    secrets:
+      github-token: ${{ secrets.GH_PAT }}
diff --git a/.nsprc b/.nsprc
new file mode 100644
index 0000000..0967ef4
--- /dev/null
+++ b/.nsprc
@@ -0,0 +1 @@
+{}

From 2b0306cae1436b3097668cf44b7f8ca3bfa201b9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20H=C3=BCgel?= <timo.huegel@js-soft.com>
Date: Thu, 6 Aug 2026 17:18:39 +0200
Subject: [PATCH 2/4] chore: remove unnecessary permissions

---
 .github/workflows/dependency-security-maintenance.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/dependency-security-maintenance.yml b/.github/workflows/dependency-security-maintenance.yml
index 3ec2267..9a644a6 100644
--- a/.github/workflows/dependency-security-maintenance.yml
+++ b/.github/workflows/dependency-security-maintenance.yml
@@ -5,9 +5,7 @@ on:
     - cron: "0 3 * * *" # every day at 03:00 UTC
   workflow_dispatch:
 
-permissions:
-  contents: write
-  pull-requests: write
+permissions: {}
 
 jobs:
   npm-audit:

From fb9a54e79908fc8cfccf15041d1d442f3d376cf9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20H=C3=BCgel?= <timo.huegel@js-soft.com>
Date: Fri, 7 Aug 2026 12:28:43 +0200
Subject: [PATCH 3/4] ci: change schedule

---
 .github/workflows/dependency-security-maintenance.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/dependency-security-maintenance.yml b/.github/workflows/dependency-security-maintenance.yml
index 9a644a6..f8b4319 100644
--- a/.github/workflows/dependency-security-maintenance.yml
+++ b/.github/workflows/dependency-security-maintenance.yml
@@ -2,7 +2,7 @@ name: Dependency Security Maintenance
 
 on:
   schedule:
-    - cron: "0 3 * * *" # every day at 03:00 UTC
+    - cron: "0 2 * * 2" # every Tuesday at 02:00 UTC
   workflow_dispatch:
 
 permissions: {}

From 4964c1de857d1ab545b01bf9db883275f4d430d2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20H=C3=BCgel?= <timo.huegel@js-soft.com>
Date: Fri, 7 Aug 2026 12:30:11 +0200
Subject: [PATCH 4/4] chore: npm audit fix

---
 package-lock.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 323e105..aafb0cb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -719,9 +719,9 @@
             "license": "Python-2.0"
         },
         "node_modules/@eslint/eslintrc/node_modules/js-yaml": {
-            "version": "4.3.0",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-            "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+            "version": "4.3.1",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+            "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
             "dev": true,
             "funding": [
                 {
@@ -4662,9 +4662,9 @@
             "license": "MIT"
         },
         "node_modules/js-yaml": {
-            "version": "3.15.0",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
-            "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
+            "version": "3.15.1",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz",
+            "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==",
             "dev": true,
             "license": "MIT",
             "dependencies": {