From c1557908faf60f30098b65653fedc5c8ca29a0c9 Mon Sep 17 00:00:00 2001
From: Mauricio Barragan <mauricioabh@gmail.com>
Date: Thu, 2 Jul 2026 12:58:35 -0600
Subject: [PATCH 1/4] chore(m4): enable Dependabot on default branch

Add .github/dependabot.yml for npm and GitHub Actions weekly updates.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .github/dependabot.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..0b80086
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: npm
+    directory: "/web"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly

From bbe4188119f02e45425437af81c83dc40104dc59 Mon Sep 17 00:00:00 2001
From: Mauricio Barragan <mauricioabh@gmail.com>
Date: Sun, 19 Jul 2026 12:43:59 -0600
Subject: [PATCH 2/4] chore(deploy): trigger VPS Deploy workflow registration
 after PR #27

Co-authored-by: Cursor <cursoragent@cursor.com>

From 71c45dca9aba6047fa24ac517a025d53a5070c74 Mon Sep 17 00:00:00 2001
From: Mauricio Barragan <mauricioabh@gmail.com>
Date: Sun, 19 Jul 2026 12:49:56 -0600
Subject: [PATCH 3/4] chore(deploy): force Actions push event to register VPS
 Deploy

Co-authored-by: Cursor <cursoragent@cursor.com>

From 5f8da3487f1dde0f8d12fc62deb5885215aea145 Mon Sep 17 00:00:00 2001
From: Mauricio Barragan <mauricioabh@gmail.com>
Date: Sun, 19 Jul 2026 12:52:35 -0600
Subject: [PATCH 4/4] fix(deploy): use ssh-agent for VPS Deploy SSH key

printf of VPS_SSH_KEY produced a corrupted private key on the runner
(libcrypto error). Switch to webfactory/ssh-agent which handles multiline
OpenSSH keys reliably.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .github/workflows/vps-deploy.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/vps-deploy.yml b/.github/workflows/vps-deploy.yml
index dc863bb..cf9728c 100644
--- a/.github/workflows/vps-deploy.yml
+++ b/.github/workflows/vps-deploy.yml
@@ -59,16 +59,19 @@ jobs:
     needs: build-push
     runs-on: ubuntu-latest
     steps:
-      - name: Setup SSH
+      - name: Install SSH key
+        uses: webfactory/ssh-agent@v0.9.1
+        with:
+          ssh-private-key: ${{ secrets.VPS_SSH_KEY }}
+
+      - name: Trust VPS host key
         run: |
           mkdir -p ~/.ssh
-          printf '%s' "${{ secrets.VPS_SSH_KEY }}" > ~/.ssh/deploy_key
-          chmod 600 ~/.ssh/deploy_key
-          ssh-keyscan -H "${{ secrets.VPS_HOST }}" >> ~/.ssh/known_hosts 2>/dev/null
+          ssh-keyscan -H "${{ secrets.VPS_HOST }}" >> ~/.ssh/known_hosts
 
       - name: Pull image and restart app
         run: |
-          ssh -i ~/.ssh/deploy_key "${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }}" bash -s <<'EOF'
+          ssh "${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }}" bash -s <<'EOF'
           set -euo pipefail
           cd /root/projects/arbpulse
           git fetch origin main