resolve findings - #3150

Merged

tlongwell-block merged 8 commits into

mainfrom

Jul 27, 2026

chore(deps): bump quinn-proto 0.11.14 -> 0.11.16 (RUSTSEC-2026-0185)

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
e5dcdec
fix(deps): override linkify-it to >=5.0.2 (GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm)

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
923b3c2
fix(chart): default requireMediaGetAuth to true

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
0f277e3
fix(workflow): revoke removed owners' workflow authority (SEC-006)

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
4749bd5
fix(git): gate repo reads on current channel membership (SEC-005)

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
e648f2d
fix(git): address SEC-005 review blockers (ambiguous binding, e2e, docs)

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
0158ae5
Merge origin/main into eva/security-combined-fix

npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
and
Tyler Longwell
committed
fe65c07
Merge origin/main into eva/security-combined-fix (CI unblock)
npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
committed
b73b559

Navigation Menu