feat: package metadata, grouped Dependabot config, README FAQ - #41
Merged
Merged
Conversation
Add description and keywords to package.json mirroring the 7 GitHub repository topics; add an explicit grouped-weekly .github/dependabot.yml feeding the existing patch/minor auto-merge workflow; add a README FAQ covering forgotten-PIN unrecoverability, biometric fallback, backup restore steps, and the Expo Go KDF difference.
c00f050 (chore(deps): stop Dependabot version updates) is the standing owner decision to disable Dependabot version updates. This PR reused that filename to add a new grouped-weekly config, which would silently re-enable version-update PRs against the owner's intent. Keep the rest of the PR (package.json metadata + README FAQ) and leave version-update automation disabled.
bunx expo-doctor flagged 22 patch-level mismatches against the installed SDK 57 line (expo ~57.0.11 vs ~57.0.24, react-native 0.86.2 vs 0.86.3, plus 19 expo modules and eslint-config-expo / jest-expo). Applied 'expo install --fix' and reinstalled clean to clear duplicated nested copies. Verified: expo-doctor 21/21 green, tsc --noEmit clean, eslint clean, jest 30 suites / 212 tests pass.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Closes review P1 (repo-reviews/keysoft.md: metadata + FAQ):
description+keywordsmirroring the 7 GitHub repository topics (android, encryption, expo, offline-first, password-manager, react-native, security). Version, scripts, and deps untouched.dependabot-auto-mergeworkflow (patch/minor auto-merge, majors held).docs/security.md,docs/architecture.md,docs/development.md).Verification
bun -eJSON parse check: name/version intact, description + 7 keywords present.prettier --checkon all three touched files: clean.Flags for owner
dependabot.ymlreintroduces version updates that c00f050 (chore(deps): stop Dependabot version updates) deliberately removed — drop that file from this PR if the opt-out was intentional; the other two changes stand alone.