Org Autohealing Report — 2026-03-30 (UTC)

[fro-bot]

Org Autohealing Report — 2026-03-30 (UTC)

Repos scanned: 7 | Target: all

CI Health

Repo	Issue	Action	Status
All repos	CI healthy	No action needed	✅Healthy

All repos have healthy CI with successful workflow runs on main branch. No flaky CI detected.

Security & Code Scanning

Repo	Finding	Severity	Action
bfra-me/.github	Dependabot alert: Picomatch ReDoS	High	Monitoring - Renovate handles
bfra-me/github-action	Dependabot alerts: Handlebars.js (1 critical, 5 high), Picomatch	Critical, High	Action Required - Multiple new Handlebars.js vulnerabilities
bfra-me/github-app	Dependabot alerts: Handlebars.js (1 critical, 5 high), Picomatch	Critical, High	Action Required - Multiple new Handlebars.js vulnerabilities
bfra-me/github-app	Missing CodeQL workflow	Medium	Existing PR #767 adds CodeQL
bfra-me/renovate-action	Dependabot alerts: Handlebars.js (1 critical, 4 high)	Critical, High	Monitoring - Renovate handles
bfra-me/works	Dependabot alerts: Handlebars.js (1 critical, 4 high)	Critical, High	Monitoring - Renovate handles

Critical: Handlebars.js vulnerabilities (GHSA-9h8g-7j2f-j9qh and related) are newly disclosed. Monitor Renovate PRs for these updates.

Dependency & Tooling Trends

Metric	Org Standard	Repos Behind	Details
TypeScript	5.9.3	—	All repos current
pnpm	10.33.0	github-action (10.32.0)	Minor drift (patch level)
Node.js	24.14.1	—	All repos current or no .node-version

Note: Minor version drift is patch-level only. Renovate will handle updates.

Developer Experience

Repo	Gap	Recommendation
bfra-me/github-action	Missing CONTRIBUTING.md, LICENSE.md	Add standard files
bfra-me/github-app	Missing CONTRIBUTING.md	Add CONTRIBUTING.md
bfra-me/ha-addon-repository	Missing CONTRIBUTING.md, LICENSE.md, .editorconfig	Add standard files
bfra-me/renovate-action	Missing CONTRIBUTING.md	Add CONTRIBUTING.md
bfra-me/renovate-config	Missing CONTRIBUTING.md, .github/settings.yml	Add files; PR #1383 addresses some
bfra-me/works	Missing README.md, CONTRIBUTING.md, LICENSE.md	Add standard files

Org Pattern Adherence

Repo	Missing	Recommendation
bfra-me/github-action	AGENTS.md	Create AGENTS.md for AI assistant guidance
bfra-me/github-app	AGENTS.md, CodeQL workflow	Create AGENTS.md; PR #767 adds CodeQL
bfra-me/ha-addon-repository	AGENTS.md, .editorconfig	Create files for consistency
bfra-me/renovate-config	AGENTS.md, .github/settings.yml	Create files
bfra-me/works	README.md	Add README.md (AGENTS.md exists)

Note: All repos have branch protection and required status checks configured. All repos have descriptions and topics set.

Stale Work

None.

Needs Human Attention

• bfra-me/github-action, bfra-me/github-app, bfra-me/renovate-action, bfra-me/works: New Handlebars.js vulnerabilities (critical/high severity). Verify Renovate is creating PRs for these updates.
• bfra-me/github-app: PR chore(deps): update bfra-me/renovate-action action to v6.3.1 #767 "Security: Add CodeQL scanning for TypeScript" is open - ready for review.
• bfra-me/renovate-config: PR chore(dev): update vitest monorepo to v4.0.11 #1383 "feat: org DX improvements" addresses CONTRIBUTING.md and other DX gaps - ready for review.
• bfra-me/.github: Draft PR doc: fix AGENTS.md drift — update renovate-changesets file count and structure #1918 "doc: fix AGENTS.md drift" - Copilot-authored, needs review.

---

Run Summary

Field	Value
Event	schedule
Repository	bfra-me/.github
Run ID	23731931364
Cache	hit
Session	ses_2e18e0432ffetbU4d8OFag3uf7

[fro-bot]

Consolidated into perpetual issue #1960. All future org autohealing reports will be added there instead of creating new issues.