From 9fbd243a56db96d87d4760b35efbd8ef5d25aa9a Mon Sep 17 00:00:00 2001
From: Devanarayanan <fusion@devakesu.com>
Date: Fri, 7 Aug 2026 16:29:12 +0000
Subject: [PATCH] chore: add Dependabot schema validation to build pipeline and
 clean up configuration file

---
 .example.env                      | 4 ++--
 .github/dependabot.yml            | 7 +++----
 .github/workflows/build-guard.yml | 6 ++++++
 mobile/lib/config/app_config.dart | 2 +-
 mobile/pubspec.yaml               | 2 +-
 package-lock.json                 | 4 ++--
 package.json                      | 2 +-
 public/openapi/openapi.yaml       | 2 +-
 8 files changed, 17 insertions(+), 12 deletions(-)

diff --git a/.example.env b/.example.env
index 9b02a5a1..9a3a760c 100644
--- a/.example.env
+++ b/.example.env
@@ -44,7 +44,7 @@ NEXT_PUBLIC_APP_NAME=GhostClass
 
 # ⚠️ App version displayed in footer and health checks
 # 🔨 Build-time (Infisical `/build-time` folder)
-NEXT_PUBLIC_APP_VERSION=4.5.1
+NEXT_PUBLIC_APP_VERSION=4.5.3
 
 # ⚠️ Your production domain WITHOUT https://
 # All URL-based variables are derived from this.
@@ -371,7 +371,7 @@ REQUEST_SIGNATURE_MAX_AGE=600
 
 # ⚠️ Minimum supported app version required to bypass forced update
 # 🚀 Runtime (Infisical `/runtime` folder → Server Env Var)
-MIN_APP_VERSION=4.5.1
+MIN_APP_VERSION=4.5.3
 
 # ℹ️ Enforce Firebase App Check for all mobile clients in production
 # Valid: "true", "false" (default: false in dev, true recommended in prod)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6191327a..492351f0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://json.schemastore.org/dependabot-2.0.json
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:
@@ -26,7 +27,6 @@ updates:
       - dependency-name: "@eslint/js"
         update-types: ["version-update:semver-major"]
     multi-ecosystem-group: "all-dependencies"
-    open-pull-requests-limit: 0
 
   - package-ecosystem: "docker"
     directory: "/"
@@ -35,7 +35,6 @@ updates:
     patterns:
       - "*"
     multi-ecosystem-group: "all-dependencies"
-    open-pull-requests-limit: 0
 
   - package-ecosystem: "github-actions"
     directory: "/"
@@ -44,11 +43,11 @@ updates:
     patterns:
       - "*"
     multi-ecosystem-group: "all-dependencies"
-    open-pull-requests-limit: 0
 
   - package-ecosystem: "pub"
     directory: "/mobile"
     schedule:
       interval: "weekly"
+    patterns:
+      - "*"
     multi-ecosystem-group: "all-dependencies"
-    open-pull-requests-limit: 0
diff --git a/.github/workflows/build-guard.yml b/.github/workflows/build-guard.yml
index 308158c1..8ed26114 100644
--- a/.github/workflows/build-guard.yml
+++ b/.github/workflows/build-guard.yml
@@ -24,3 +24,9 @@ jobs:
       - name: Verify commit is signed
         run: |
           git log -1 --show-signature
+
+      - name: Validate Dependabot config
+        run: |
+          python3 -m pip install check-jsonschema
+          check-jsonschema --schemafile https://json.schemastore.org/dependabot-2.0.json .github/dependabot.yml
+
diff --git a/mobile/lib/config/app_config.dart b/mobile/lib/config/app_config.dart
index 408ee7d2..6d59f8d2 100644
--- a/mobile/lib/config/app_config.dart
+++ b/mobile/lib/config/app_config.dart
@@ -81,7 +81,7 @@ class AppConfig {
 
   /// Current application version (derived from Infisical compilation injection).
   static String get appVersion =>
-      const String.fromEnvironment('APP_VERSION', defaultValue: '4.5.1');
+      const String.fromEnvironment('APP_VERSION', defaultValue: '4.5.3');
 
   /// Commit SHA injected by CI for release builds.
   static String get appCommitSha =>
diff --git a/mobile/pubspec.yaml b/mobile/pubspec.yaml
index a457448c..a546ab5a 100644
--- a/mobile/pubspec.yaml
+++ b/mobile/pubspec.yaml
@@ -16,7 +16,7 @@ publish_to: "none" # Remove this line if you wish to publish to pub.dev
 # https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CoreFoundationKeys.html
 # In Windows, build-name is used as the major, minor, and patch parts
 # of the product and file versions while build-number is used as the build suffix.
-version: 4.5.1+1
+version: 4.5.3+1
 environment:
   sdk: ^3.11.4
 
diff --git a/package-lock.json b/package-lock.json
index 61675837..e5e5cdd7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "ghostclass",
-  "version": "4.5.1",
+  "version": "4.5.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "ghostclass",
-      "version": "4.5.1",
+      "version": "4.5.3",
       "dependencies": {
         "@hookform/resolvers": "^5.5.7",
         "@radix-ui/react-alert-dialog": "^1.1.23",
diff --git a/package.json b/package.json
index fb5a0e28..b9fa7f32 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ghostclass",
-  "version": "4.5.1",
+  "version": "4.5.3",
   "private": true,
   "engines": {
     "node": ">=22.12.0",
diff --git a/public/openapi/openapi.yaml b/public/openapi/openapi.yaml
index b8f2fd2f..46fe964f 100644
--- a/public/openapi/openapi.yaml
+++ b/public/openapi/openapi.yaml
@@ -6,7 +6,7 @@ openapi: 3.1.0
 
 info:
   title: GhostClass API
-  version: 4.5.1
+  version: 4.5.3
   description: |
     **GhostClass API** provides endpoints for authentication, profile synchronization,
     attendance integrations with EzyGo, telemetry, and build provenance.