Merge pull request #4672 from alphagov/update-codeowners-file

Author: querkmachine

.github/dependabot.yml

@@ -76,9 +76,6 @@ updates:
       - dependency-name: 'iframe-resizer'
         update-types: ['version-update:semver-major']
 
-    reviewers:
-      - alphagov/design-system-developers
-
     # Schedule run every Monday, local time
     schedule:
       interval: monthly
@@ -93,8 +90,6 @@ updates:
   # Update GitHub Actions
   - package-ecosystem: github-actions
     directory: /
-    reviewers:
-      - alphagov/design-system-developers
 
     # Schedule run every Monday, local time
     schedule:

CODEOWNERS

@@ -1,2 +1,8 @@
 # Workflows (which have access to secrets and to production)
 .github/workflows/  @alphagov/design-system-developers
+
+# Track changes to package.json or package-lock.json
+/package*.json  @alphagov/design-system-developers
+
+# Protect the CODEOWNERS file itself against malicious changes
+CODEOWNERS  @alphagov/design-system-developers