Skip to content

Resolve dependency advisories in lockfiles - #251

Merged
0thernet merged 1 commit into
mainfrom
fix/dependency-audit
Oct 5, 2026
Merged

0thernet merged 1 commit into
mainfrom
fix/dependency-audit

Conversation

@0thernet

@0thernet 0thernet commented Oct 5, 2026

Copy link
Copy Markdown
Member

Summary

  • Org-wide dependency-audit sweep: bumps, overrides, and surgical lockfile rewrites that clear flagged advisories without re-resolving private or GitHub dependencies.
  • examples/coding-harness/requirements-harbor.txt: anyio >= 4.14.2 (floor pin for resolved ['4.9.0'])
  • examples/coding-harness/requirements-harbor.txt: idna >= 3.15 (floor pin for resolved ['3.9.0'])

Remaining advisories

  • fflate -> 0.7.5 blocked by posthog-js requires ^0.4.8
  • fxhash no fixed release
  • paste no fixed release
  • proc-macro-error no fixed release

Generated with Devin

Generated with Devin (https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@vercel

vercel Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
algal Ready Ready Preview Oct 5, 2026 3:12am UTC

Request Review

@0thernet
0thernet enabled auto-merge (squash) October 5, 2026 03:11
@0thernet
0thernet merged commit 137e23c into main Oct 5, 2026
28 checks passed
@0thernet
0thernet deleted the fix/dependency-audit branch October 5, 2026 03:17

This branch was successfully deployed

1 active deployment
Preview — d1a6042e Deployed Oct 5, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant