fix(ci): Dependabot composer ecosystem, CodeQL PHP coverage

somethingwithproof · somethingwithproof · commit ba0eb4fe3951 · 2026-04-09T23:03:06.000-07:00
- Change Dependabot ecosystem from npm to composer (PHP-only repo)
- Remove PHP from CodeQL paths-ignore so security PRs get analysis
- Remove committed .omc session artifacts, add .omc/ to .gitignore

Signed-off-by: Thomas Vincent &lt;thomasvincent@gmail.com&gt;
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,6 +1,6 @@
 version: 2
 updates:
-  - package-ecosystem: "npm"
+  - package-ecosystem: "composer"
     directory: "/"
     schedule:
       interval: "weekly"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -4,12 +4,10 @@ on:
   push:
     branches: [main, master, develop]
     paths-ignore:
-      - "**/*.php"
       - "**/*.md"
   pull_request:
     branches: [main, master, develop]
     paths-ignore:
-      - "**/*.php"
       - "**/*.md"
   schedule:
     - cron: "30 1 * * 1"
diff --git a/.gitignore b/.gitignore
@@ -22,3 +22,4 @@
 
 
 locales/po/*.mo
+.omc/

Original file line number	Diff line number	Diff line change
`@@ -22,3 +22,4 @@`
`22`	`22`
`23`	`23`
`24`	`24`	`locales/po/*.mo`
	`25`	`+.omc/`