Org Autohealing Report — 2026-03-27 (UTC)

[fro-bot]

Org Autohealing Report — 2026-03-27 (UTC)

Repos scanned: 7 | Target: all

CI Health

Repo	Issue	Action	Status
All repos	CI healthy	No action needed	✅ Healthy

All repos have healthy CI with successful workflow runs on main branch. No flaky CI detected (>20% failure rate threshold not reached).

Security & Code Scanning

Repo	Finding	Severity	Action
bfra-me/.github	Depabot alerts: Picomatch ReDoS, brace-expansion	1 High, 2 Medium	Monitoring - Renovate handles dependency updates
bfra-me/github-action	Dependabot alert: Picomatch ReDoS	High	Existing security PRs addressing
bfra-me/github-app	Dependabot alert: Picomatch ReDoS	High	Existing security PRs addressing
bfra-me/github-app	Missing CodeQL workflow	Medium	PR #767 exists to add CodeQL
bfra-me/renovate-action	Dependabot alerts: Picomatch, yaml, Handlebars	2 High, 4 Medium	Monitoring - Renovate handles dependency updates

Note: Renovate owns dependency updates. Critical/high security advisories are addressed through Renovate PRs. All pinned actions use commit SHAs.

Dependency & Tooling Trends

Metric	Org Standard	Repos Behind	Details
TypeScript	5.9.3	—	All repos current
Node.js	24.14.1	github-action (24.14.0)	Minor drift (patch level)
pnpm	10.32.1	github-action (10.32.0)	Minor drift (patch level)
Shared configs	@bfra.me/*	—	All repos using org configs

Note: Minor version drift is patch-level only. Renovate will handle updates. No action required.

Developer Experience

Repo	Gap	Recommendation
bfra-me/github-action	Missing CONTRIBUTING.md, LICENSE.md	Add standard files
bfra-me/github-app	Missing CONTRIBUTING.md	Add CONTRIBUTING.md
bfra-me/ha-addon-repository	Missing CONTRIBUTING.md, LICENSE.md, .editorconfig	Add standard files
bfra-me/renovate-action	Missing CONTRIBUTING.md	Add CONTRIBUTING.md
bfra-me/renovate-config	Missing CONTRIBUTING.md, .github/settings.yml	Add files
bfra-me/works	Missing README.md, CONTRIBUTING.md, LICENSE.md	Add standard files

Note: PR #1383 in renovate-config addresses some of these gaps (CONTRIBUTING.md, VSCode settings).

Org Pattern Adherence

Repo	Missing	Recommendation
bfra-me/github-action	AGENTS.md	Create AGENTS.md for AI assistant guidance
bfra-me/github-app	AGENTS.md, CodeQL workflow	Create AGENTS.md; PR #767 adds CodeQL
bfra-me/ha-addon-repository	AGENTS.md, .editorconfig	Create files for consistency
bfra-me/renovate-config	AGENTS.md, .github/settings.yml	Create files; PR #1383 addresses some gaps
bfra-me/works	AGENTS.md, README.md	Files exist but verify completeness

Note: All repos have branch protection and required status checks configured. All repos have descriptions and topics set.

Stale Work

None.

All open issues and PRs are either active (dependency updates, feature work) or expected (autohealing reports). No stale draft PRs or orphaned work found.

Needs Human Attention

• bfra-me/.github, bfra-me/renovate-action: Multiple Dependabot alerts (medium/high severity). Renovate should handle dependency updates, but verify these are being addressed.
• bfra-me/github-app: PR chore(deps): update bfra-me/renovate-action action to v6.3.1 #767 "Security: Add CodeQL scanning for TypeScript" is open and ready for review.
• bfra-me/renovate-config: PR chore(dev): update vitest monorepo to v4.0.11 #1383 "feat: org DX improvements" addresses CONTRIBUTING.md and other DX gaps - ready for review.

---

Run Summary

Field	Value
Event	schedule
Repository	bfra-me/.github
Run ID	23633894637
Cache	hit
Session	ses_2e18e0432ffetbU4d8OFag3uf7

[fro-bot]

Consolidated into perpetual issue #1960. All future org autohealing reports will be added there instead of creating new issues.