From bf7fe8333b313d961828c4adae64fd20ffa7b18c Mon Sep 17 00:00:00 2001
From: Don Petry <36422719+don-petry@users.noreply.github.com>
Date: Sat, 24 Oct 2026 19:43:34 -0500
Subject: [PATCH 1/3] chore(security): remove local SECURITY.md to inherit
 org-wide policy

---
 SECURITY.md | 32 --------------------------------
 1 file changed, 32 deletions(-)
 delete mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
deleted file mode 100644
index a4eea754..00000000
--- a/SECURITY.md
+++ /dev/null
@@ -1,32 +0,0 @@
-# Security Policy
-
-## Supported Versions
-
-| Version     | Supported          |
-| ----------- | ------------------ |
-| main branch | :white_check_mark: |
-
-## Reporting a Vulnerability
-
-If you discover a security vulnerability in this project, please report it responsibly.
-
-**Do not open a public issue.**
-
-Instead, use the following method:
-
-1. **GitHub Private Vulnerability Reporting**: Use the [Security tab](https://github.com/combsmith/google-app-scripts/security/advisories/new) to report a vulnerability privately.
-
-### What to include
-
-- A description of the vulnerability
-- Steps to reproduce the issue
-- Any relevant logs or screenshots
-- The potential impact of the vulnerability
-
-### Response Timeline
-
-- **Acknowledgement**: Within 48 hours of receiving your report.
-- **Initial Assessment**: Within 5 business days.
-- **Resolution**: We aim to release a fix within 30 days of confirming the vulnerability, depending on complexity.
-
-We appreciate your help in keeping this project secure.

From 0159a385ca59f460a4e823b0fd963ae86f14b5fd Mon Sep 17 00:00:00 2001
From: Don Petry <36422719+don-petry@users.noreply.github.com>
Date: Sat, 24 Oct 2026 19:43:35 -0500
Subject: [PATCH 2/3] docs(readme): point security policy link to
 combsmith/.github

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index ed6d489b..0b179428 100644
--- a/README.md
+++ b/README.md
@@ -94,7 +94,7 @@ For commercial inquiries, email [support@combsmith.com](mailto:support@combsmith
 
 ## 🤝 Contributing
 
-Contributions are welcome! Please review the org-wide [Contributing Guide](https://github.com/combsmith/.github/blob/main/CONTRIBUTING.md) and [SECURITY.md](SECURITY.md).
+Contributions are welcome! Please review the org-wide [Contributing Guide](https://github.com/combsmith/.github/blob/main/CONTRIBUTING.md) and [Security Policy](https://github.com/combsmith/.github/blob/main/SECURITY.md).
 
 1.  Fork the repository.
 2.  Create a feature branch (`git checkout -b feature/AmazingScript`).

From 799f74efedb500870b7d9cae6af3bc029bb681e9 Mon Sep 17 00:00:00 2001
From: Rachel Petry <287457313+rachel-petry@users.noreply.github.com>
Date: Sat, 24 Oct 2026 20:36:39 -0500
Subject: [PATCH 3/3] fix(deps): bump fast-uri in package-lock.json to resolve
 npm audit

---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0d3084bf..1e302f0d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3900,9 +3900,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.8",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
-      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
+      "version": "3.1.9",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
+      "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
       "dev": true,
       "funding": [
         {