[dependabot]

Bumps the github-actions group with 1 update: showxu/skills/skills/github-readme-design/scripts.

Updates showxu/skills/skills/github-readme-design/scripts from 36707036061a2d0ba012184ef0b6d6820082127f to fc3529f199d43d1df6968bfc682220d3e75a2c4b

Changelog

Sourced from showxu/skills/skills/github-readme-design/scripts's changelog.

Changelog

Unreleased

0.1.7

• github-repo-steward governance shows how the owner can enable signing for GitHub clones once: copyable commands with placeholders put the signing settings in a file that global config includes only for GitHub remotes, with none of them in global config itself, and generate the personal allowed-signers list from the account. The recommended layout keeps global config, the signing file and the personal list in Git's XDG directory, ~/.config/git/. user.signingkey takes the private-key path with its .pub beside it. Clones that take owner commits need nothing when they inherit identity and signing; otherwise they get local settings from scripts/configure-signing.sh.

0.1.6

• github-repo-steward configures a clone's identity, SSH signing and allowed-signers list on its own with scripts/configure-signing.sh, without the push gate; scripts/configure-clone.sh still requires its checks and now delegates signing to it. Both write only settings the clone does not already inherit, and use ALLOWED_SIGNERS when set, otherwise the clone's local list, otherwise an inherited list that already authorizes the owner, otherwise allowed_signers in the repository's common Git directory, which all worktrees share and which survives removing a worktree. They append the owner's line when no line authorizes the owner's key for Git signing and keep every other signer; an inherited list, a symbolic link or repository content is only read, and an inherited list without the owner's key is reported.
• github-repo-steward governance defaults to signing configured once per machine in global Git config and inherited by clones. The owner's keys registered on GitHub are the source of truth: the personal list holds only them and is regenerated from the account after a reinstall or rotation, and a committed list holds only signers no account publishes, such as release automation, under a repository's .github/ or its organization's .github repository.

0.1.5

• agent-evolver re-evaluates a skill collection, named skills or a set of instruction units for a new model, host or agent-tool version, or for newly published official agent guidance, and applies only the findings the user approves. Audits are read-only and measure each item's listing and context cost; guidance audits cover only the items a recommendation concerns. Approved cleanup follows a fixed order with removal accounting and before/after trigger evals. Instruction changes edit units and are verified by regeneration, doctor and readback in fresh sessions. scripts/usage_counts.py counts skill use per host, apart from maintenance

... (truncated)

Commits

• fc3529f docs(github-repo-steward): give the owner a machine signing setup
• 55443c1 test(github-repo-steward): use a neutral example organization and configured ...
• 4a18707 feat(github-repo-steward): configure signing alone and reuse allowed-signers ...
• 7adb174 chore(release): prepare 0.1.5 (#77)
• 2c077af refactor(agent-evolver)!: re-evaluate skills and instructions after upgrades ...
• 65ceca2 docs: generate AGENTS.md from agent instruction units (#75)
• 21a48e0 chore(release): prepare 0.1.3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions