Merge pull request #3 from proyectoauraorg/security/hardening-2026

security: Hardening crítico - eliminar .gitconfig, dependabot.yml, CODEOWNERS

Author: proyectoauraorg

.gitconfig

@@ -0,0 +1,62 @@
+# Dependabot configuration for Zoo-Code
+# See: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  # Keep npm dependencies up to date
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+      timezone: "America/Monterrey"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "proyectoauraorg"
+    labels:
+      - "dependencies"
+      - "automated"
+    commit-message:
+      prefix: "chore(deps):"
+    groups:
+      vscode-dependencies:
+        patterns:
+          - "@vscode/*"
+          - "vscode-*"
+      testing-dependencies:
+        patterns:
+          - "vitest"
+          - "@vitest/*"
+          - "playwright"
+          - "@playwright/*"
+          - "jest"
+          - "@jest/*"
+      typescript-dependencies:
+        patterns:
+          - "typescript"
+          - "@types/*"
+          - "ts-*"
+      eslint-dependencies:
+        patterns:
+          - "eslint"
+          - "eslint-*"
+          - "@eslint/*"
+
+  # Keep GitHub Actions up to date
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+      timezone: "America/Monterrey"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "proyectoauraorg"
+    labels:
+      - "dependencies"
+      - "ci"
+      - "automated"
+    commit-message:
+      prefix: "ci(deps):"

.github/dependabot.yml

@@ -58,3 +58,6 @@ roo-cli-*.tar.gz*
 
 # Workspace config files (local to each machine)
 *.code-workspace
+
+# Git config (local to each machine)
+.gitconfig

.gitignore

@@ -0,0 +1,19 @@
+# CODEOWNERS - Defines code ownership for automatic review requests
+# See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# Default owner for everything
+* @proyectoauraorg
+
+# Core extension code
+src/ @proyectoauraorg
+
+# Build and CI configuration
+.github/ @proyectoauraorg
+package.json @proyectoauraorg
+tsconfig*.json @proyectoauraorg
+esbuild.js @proyectoauraorg
+vite.config.*.ts @proyectoauraorg
+
+# Security-sensitive files
+.gitignore @proyectoauraorg
+CODEOWNERS @proyectoauraorg