From 856c02f81def18c2824e435ac0b784a7844d379f Mon Sep 17 00:00:00 2001
From: Patel230 <Lakshmanp230@gmail.com>
Date: Tue, 9 Jun 2026 01:14:11 +0530
Subject: [PATCH] chore: sync docs and ignore local artifacts

---
 .DS_Store    | Bin 6148 -> 0 bytes
 .gitignore   |   3 +++
 CHANGELOG.md |   2 --
 SECURITY.md  |   4 ++--
 4 files changed, 5 insertions(+), 4 deletions(-)
 delete mode 100644 .DS_Store

diff --git a/.DS_Store b/.DS_Store
deleted file mode 100644
index 5008ddfcf53c02e82d7eee2e57c38e5672ef89f6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 6148
zcmeH~Jr2S!425mzP>H1@V-^m;4Wg<&0T*E43hX&L&p$$qDprKhvt+--jT7}7np#A3
zem<@ulZcFPQ@L2!n>{z**<q8>++&mCkOWA81W14cNZ<zv;LbK1Poaz?KmsK2CSc!(
z0ynLxE!0092;Krf2c+FF_Fe*7ECH>lEfg7;MkzE(HCqgga^y>{tEnwC%0;vJ&^%eQ
zLs35+`xjp>T0<F0fCPF1$Cyrb|F7^5{eNG?83~ZUUlGt@xh*qZDeu<Z%US-OSsOPv
j)R!Z4KLME7ReXlK;d!wEw5GODWMKRea10D2@KpjYNUI8I

diff --git a/.gitignore b/.gitignore
index 49715df..784e66e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,3 +9,6 @@ basic
 .claude/
 .codegraph/
 coverage.out
+
+# macOS
+.DS_Store
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c400432..8194ccd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -36,8 +36,6 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 - `.editorconfig` — UTF-8, LF, final newline, trim trailing whitespace,
   tabs for Go + Makefile, 2-space indent for YAML/JSON/TOML, no-trim
   for Markdown.
-- `.github/dependabot.yml` — weekly `gomod` (root + `browser/`
-  sub-module) + `github-actions` updates.
 - `.github/PULL_REQUEST_TEMPLATE.md` — Summary / Changes / Scan-
   quality impact / SARIF compatibility / SSRF & egress safety /
   Testing / Checklist.
diff --git a/SECURITY.md b/SECURITY.md
index 43320e1..ac7b4fc 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -44,8 +44,8 @@ We follow [coordinated vulnerability disclosure](https://en.wikipedia.org/wiki/C
 
 ## Security practices in this repo
 
-- **Dependency monitoring:** automated via Dependabot (see
-  `.github/dependabot.yml`).
+- **Dependency monitoring:** vulnerable dependencies are detected by
+  `govulncheck`, which runs on every CI build (see "Vulnerability scanning").
 - **Static analysis:** `golangci-lint` / `ruff` / `mypy` enforced in CI.
 - **Vulnerability scanning:** `govulncheck` (Go) / `pip-audit` (Python) run
   on every CI build.