fix(security): xlsx CVE bump and bundled security hardening - #4481

Merged

waleedlatif1 merged 7 commits into

waleedlatif1/fix-xlsx-cve

May 6, 2026

Commits on May 6, 2026

fix(security): xlsx CVE bump and bundled security hardening
waleedlatif1
committed
56d6a45
fix(stripe): use configured secret key for SDK init
waleedlatif1
and
claude
committed
71c1176
fix(stripe): use static Stripe.webhooks for verification
waleedlatif1
and
claude
committed
e8641d6
fix(ci): revert client-bundled tools to avoid .server import in client
waleedlatif1
committed
0b1feb5
fix(security): collapse 403 to 404 on v1 detail-by-ID routes
waleedlatif1
committed
d68558c
chore(security): remove unused validateAgiloftInstanceUrl helper
waleedlatif1
committed
fa6c098
fix(security): bump minimatch + clean up scripts/ workspace
waleedlatif1
and
claude
committed
d3dc1d7