You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Changed
Dependency bump via Dependabot; committed bundle rebuilt. (automated)
Security
Bumped the pinned ossf/scorecard-action to 2d1146689b8cda280b9bc96326124645441f03bc (v2.4.4). Dependabot's weekly github-actions group PR landed this in apple-mail-mcp (#134) and apple-numbers-mcp (#56) but skipped this repo and apple-notes-mcp, so conformance-check.sh reported DRIFT: .github/workflows/scorecard.yml differs. The four servers are meant to carry a byte-identical workflow set, and a silent group-skip is the recurring way that breaks. .github/ does not ship, so this owes no version bump.