From 82b4a2a4410bd17187298d4756f651cc3d0513e8 Mon Sep 17 00:00:00 2001
From: Shinrai <Shinrai@users.noreply.github.com>
Date: Wed, 2 Sep 2026 21:18:49 -0700
Subject: [PATCH 1/2] ci(hotfix-redirector): map CLDMV_BOT_* GPG secrets so
 redirected security PRs are signed

The dependabot-security redirect path in workflow-hotfix-redirector.yml@v4
cherry-picks onto `hotfixes` and needs the bot GPG key to sign the commit, or
the redirected PR is silently blocked by required-signatures. wire the CLDMV_BOT_* signing secrets into the caller.

See CLDMV/.github#257.
---
 .github/workflows/hotfix-redirector.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/hotfix-redirector.yml b/.github/workflows/hotfix-redirector.yml
index 830cad6..9ff0443 100644
--- a/.github/workflows/hotfix-redirector.yml
+++ b/.github/workflows/hotfix-redirector.yml
@@ -49,3 +49,7 @@ jobs:
             # Map your repo/org secrets to the expected names.
             BOT_APP_CLIENT_ID: ${{ secrets.CLDMV_BOT_APP_CLIENT_ID }}
             BOT_APP_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_APP_PRIVATE_KEY }}
+            BOT_NAME: ${{ secrets.CLDMV_BOT_NAME }}
+            BOT_EMAIL: ${{ secrets.CLDMV_BOT_EMAIL }}
+            BOT_GPG_PRIVATE_KEY: ${{ secrets.CLDMV_BOT_GPG_PRIVATE_KEY }}
+            BOT_GPG_PASSPHRASE: ${{ secrets.CLDMV_BOT_GPG_PASSPHRASE }}

From dcb604d073703d2371e95b73ccf790ad5aa5851d Mon Sep 17 00:00:00 2001
From: "cldmv-bot[bot]" <230771808+cldmv-bot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 11:54:27 +0000
Subject: [PATCH 2/2] chore: bump version to 0.0.6

---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9b9cc70..b0595f6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "gitmulti",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "gitmulti",
-      "version": "0.0.5",
+      "version": "0.0.6",
       "license": "GPL-3.0",
       "dependencies": {
         "commander": "^2.19.0"
diff --git a/package.json b/package.json
index a9c6ab1..60bc9b8 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "gitmulti",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "description": "Simple Node system to manage multiple Repositories into the same repo",
   "main": "gitmulti.js",
   "scripts": {