 Dave Kempe
|
32c60469e4
|
Merge pull request #5 from sol1/dependabot/github_actions/actions/checkout-6
ci: bump actions/checkout from 4 to 6
|
2026-02-07 11:25:24 +11:00 |
|
|
Dave Kempe
|
bf49438ae7
|
Merge pull request #6 from sol1/dependabot/github_actions/actions/upload-artifact-6
ci: bump actions/upload-artifact from 4 to 6
|
2026-02-07 11:25:12 +11:00 |
|
|
Dave Kempe
|
577a28dbcb
|
Merge pull request #7 from sol1/dependabot/github_actions/actions/download-artifact-7
ci: bump actions/download-artifact from 4 to 7
|
2026-02-07 11:25:00 +11:00 |
|
|
dependabot[bot]
|
1569fe234e
|
ci: bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-07 00:13:39 +00:00 |
|
|
dependabot[bot]
|
868c5ef2c9
|
ci: bump actions/upload-artifact from 4 to 6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-07 00:13:38 +00:00 |
|
|
dependabot[bot]
|
c40fca09a7
|
ci: bump actions/cache from 4 to 5
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-07 00:13:37 +00:00 |
|
|
dependabot[bot]
|
468bb8d342
|
ci: bump actions/download-artifact from 4 to 7
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v7)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-07 00:13:36 +00:00 |
|
|
Dave Kempe
|
05f39d3d1f
|
Patch dependency vulnerabilities, update Rust to 1.93
- bytes 1.11.0 -> 1.11.1 (integer overflow fix)
- time 0.3.41 -> 0.3.47 (stack exhaustion DoS fix)
- Ignore RUSTSEC-2023-0071 (rsa timing attack, no fix available)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-02-07 10:08:08 +11:00 |
|
|
Dave Kempe
|
fead6bbd9b
|
Add supply chain security: Dependabot, cargo audit in CI
- Enable Dependabot for weekly Cargo and GitHub Actions updates
- Add cargo audit step to CI pipeline
- Patch bytes 1.11.0 -> 1.11.1 (integer overflow fix)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-02-07 10:03:18 +11:00 |
|
|
Dave Kempe
|
67101e27ce
|
Initial public release
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-02-06 14:38:53 +11:00 |
|