[StepSecurity] Apply security best practices

[step-security-bot]

Summary

This pull request is created by StepSecurity at the request of @ildyria. Please merge the Pull Request to incorporate the requested changes. Please tag @ildyria on your message if you have any questions related to the PR.

Security Fixes

Keeping your actions up to date with Dependabot

With Dependabot version updates, when Dependabot identifies an outdated dependency, it raises a pull request to update the manifest to the latest version of the dependency. This is recommended by GitHub as well as The Open Source Security Foundation (OpenSSF).

• GitHub Security Guide
• The Open Source Security Foundation (OpenSSF) Security Guide

Feedback

For bug reports, feature requests, and general feedback; please email support@stepsecurity.io. To create such PRs, please visit https://app.stepsecurity.io/securerepo.

Signed-off-by: StepSecurity Bot bot@stepsecurity.io

Summary by CodeRabbit

• Chores
  • Updated dependency monitoring configuration to scan additional locations for Docker-related dependencies.

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 936f3f68-c8a1-4a8f-aae9-d5d993ba805e

📥 Commits

Reviewing files that changed from the base of the PR and between 7d79492 and b498e3f.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

📝 Walkthrough

Walkthrough

Dependabot's Docker ecosystem configuration is updated to monitor the repository root directory (/) in addition to the existing Dockerfile and Dockerfile-legacy paths. The weekly update schedule remains unchanged.

Changes

Docker Ecosystem Configuration

Layer / File(s)	Summary
Docker directory configuration .github/dependabot.yml	The docker update configuration now includes the root directory (/) in the monitored directories list, expanding checks beyond Dockerfile and Dockerfile-legacy.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

A rabbit hops through configs small,
Adding / to catch them all—
Root and Dockerfile in sight,
Dependencies stay bright! 🐰📦

🚥 Pre-merge checks | ✅ 1

✅ Passed checks (1 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}