chore: security improvements

.github/dependabot.yml

@@ -9,11 +9,7 @@ updates:
     schedule:
       interval: weekly
     commit-message:
-      # Prefix all commit messages with "chore(deps): "
       prefix: 'chore(deps): '
-    reviewers:
-      - OpenZeppelin/defender-sre
-      - OpenZeppelin/defender-dev
 
   # Maintain dependencies for npm
   - package-ecosystem: npm
@@ -24,13 +20,8 @@ updates:
       - dependency-name: '*'
         update-types: [version-update:semver-major]
     commit-message:
-      # Prefix all commit messages
       prefix: 'chore(deps): '
-    reviewers:
-      - OpenZeppelin/defender-dev
-      - OpenZeppelin/defender-sre
     labels:
       - dependabot
       - dependencies
-    # Allow up to 10 open pull requests for testing
     open-pull-requests-limit: 5

.github/workflows/codeql.yml

@@ -1,27 +1,34 @@
-name: 'CodeQL'
+name: "CodeQL Advanced"
 
 on:
   push:
-    branches: ['main', 'release-v*']
+    branches: ["main", "release-v*"]
   pull_request:
-    branches: ['main']
+    branches: ["main"]
   schedule:
-    - cron: '40 12 * * 3'
+    - cron: "40 12 * * 3"
 
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
     runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
     permissions:
-      actions: read
-      contents: read
-      packages: read
+      # required for all workflows
       security-events: write
 
+      # required to fetch internal or private CodeQL packs
+      actions: read
+
+      # only required for workflows in private repositories
+      # actions: read
+      # contents: read
+
     strategy:
       fail-fast: false
       matrix:
         include:
+          - language: actions
+            build-mode: none
           - language: javascript-typescript
             build-mode: none
 
@@ -38,4 +45,4 @@ jobs:
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
-          category: '/language:${{matrix.language}}'
+          category: "/language:${{matrix.language}}"

.github/workflows/scorecard.yml

@@ -24,8 +24,8 @@ jobs:
       # Needed to publish results and get a badge (see publish_results below).
       id-token: write
       # Comment/renmove the permissions below if installing in a public repository.
-      contents: read
-      actions: read
+      # contents: read
+      # actions: read
 
     steps:
       - name: Harden Runner

CHANGELOG.md

@@ -24,3 +24,15 @@
 ## 0.2.0-rc.0 (2025-06-21)
 
 - feat: Add Stellar examples ([#80](https://github.com/OpenZeppelin/openzeppelin-relayer-sdk/pull/80))
+
+## 0.1.0
+
+### Minor Changes
+
+- [#34](https://github.com/OpenZeppelin/openzeppelin-relayer-sdk/pull/34) [`2697eee`](https://github.com/OpenZeppelin/openzeppelin-relayer-sdk/commit/2697eeef0e5e216244cf60d059584907d96d8e60) Thanks [@oz-release-app](https://github.com/apps/oz-release-app)! - The initial release, v0.1.0.
+
+## 0.1.0-rc.0
+
+### Minor Changes
+
+- [`2697eee`](https://github.com/OpenZeppelin/openzeppelin-relayer-sdk/commit/2697eeef0e5e216244cf60d059584907d96d8e60) Thanks [@collins-w](https://github.com/collins-w)! - The initial release, v0.1.0.

CODEOWNERS

@@ -1,3 +1,4 @@
-* @collins-w @d-carmo @dylankilkenny @nahimterrazas @zeljkoX @shahnami @tirumerla
+* @OpenZeppelin/relayer-maintainers
+
+SECURITY.md @OpenZeppelin/product-security
 
-SECURITY.md @zeljkoX @tirumerla @son-oz