Only store integrities for http: and https: imports

Editor assessment

A model one-liner. The subject is imperative, lowercase, period-free, and states a precise policy change: integrities are stored only for http: and https: imports. The lock scope maps cleanly onto the subsystem, the length sits comfortably under 72 characters, and the fix type correctly signals a patch release. Because the behavioral rule is fully contained in the header, the absence of a body is defensible, though a sentence on why other schemes were excluded would still add value. For changelog automation this is exactly the shape of message you want: scannable, specific, and unambiguous about what users will observe.