dependabot[bot] and GitHub
4c8efe249e
chore(deps): bump the github-actions group across 1 directory with 9 updates
...
Bumps the github-actions group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.38.1` | `4.39.1` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action ) | `4.38.1` | `4.39.1` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.38.1` | `4.39.1` |
| [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain ) | `02cb101ec7c40f2c49e1d9714d64511d8e1b74de` | `683b588c487a69d01f6c6ddf40f036ff682cc2c8` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `7.0.1` | `7.0.2` |
| [rust-lang/crates-io-auth-action](https://github.com/rust-lang/crates-io-auth-action ) | `1.0.5` | `1.0.6` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `8.0.1` | `8.0.2` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) | `2.4.4` | `2.5.0` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.38.1` | `4.39.1` |
Updates `github/codeql-action/init` from 4.38.1 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `github/codeql-action/autobuild` from 4.38.1 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `github/codeql-action/analyze` from 4.38.1 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `dtolnay/rust-toolchain` from 02cb101ec7c40f2c49e1d9714d64511d8e1b74de to 683b588c487a69d01f6c6ddf40f036ff682cc2c8
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases )
- [Commits](https://github.com/dtolnay/rust-toolchain/compare/02cb101ec7c40f2c49e1d9714d64511d8e1b74de...683b588c487a69d01f6c6ddf40f036ff682cc2c8 )
Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9 )
Updates `rust-lang/crates-io-auth-action` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/rust-lang/crates-io-auth-action/releases )
- [Commits](https://github.com/rust-lang/crates-io-auth-action/compare/c6f97d42243bad5fab37ca0427f495c86d5b1a18...3268eb413133e2960fa4ae0e963ca76380c54cd9 )
Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333 )
Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/2d1146689b8cda280b9bc96326124645441f03bc...fa7117db83c52d787ae5a89f350999701505d78e )
Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: dtolnay/rust-toolchain
dependency-version: 683b588c487a69d01f6c6ddf40f036ff682cc2c8
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: rust-lang/crates-io-auth-action
dependency-version: 1.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/download-artifact
dependency-version: 8.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: ossf/scorecard-action
dependency-version: 2.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-28 12:19:48 +00:00
Devid and GitHub
2a6cd8015a
Merge pull request #16 from masdevid/dependabot/github_actions/github-actions-af0bba1cf7
...
chore(deps): bump the github-actions group with 5 updates
2026-10-14 10:01:31 +07:00
Devid and GitHub
4216d704cd
Merge pull request #18 from masdevid/dependabot/cargo/minor-and-patch-335c3d52a5
...
chore(deps): bump the minor-and-patch group across 1 directory with 4 updates
2026-10-14 10:01:09 +07:00
dependabot[bot] and GitHub
9ddabff95a
chore(deps): bump the minor-and-patch group across 1 directory with 4 updates
...
Bumps the minor-and-patch group with 4 updates in the / directory: [tokio](https://github.com/tokio-rs/tokio ), [clap](https://github.com/clap-rs/clap ), [uuid](https://github.com/uuid-rs/uuid ) and [encoding_rs](https://github.com/hsivonen/encoding_rs ).
Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.53.1...tokio-1.53.2 )
Updates `clap` from 4.6.6 to 4.6.7
- [Release notes](https://github.com/clap-rs/clap/releases )
- [Changelog](https://github.com/clap-rs/clap/blob/main/CHANGELOG.md )
- [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.6.6...clap_complete-v4.6.7 )
Updates `uuid` from 1.26.1 to 1.27.0
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.26.1...v1.27.0 )
Updates `encoding_rs` from 0.8.41 to 0.8.42
- [Commits](https://github.com/hsivonen/encoding_rs/compare/v0.8.41...v0.8.42 )
---
updated-dependencies:
- dependency-name: tokio
dependency-version: 1.53.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: clap
dependency-version: 4.6.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: uuid
dependency-version: 1.27.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: encoding_rs
dependency-version: 0.8.42
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-07 12:14:45 +00:00
dependabot[bot] and GitHub
7300124445
chore(deps): bump the github-actions group with 5 updates
...
Bumps the github-actions group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.38.0` | `4.38.1` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action ) | `4.38.0` | `4.38.1` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.38.0` | `4.38.1` |
| [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain ) | `6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772` | `02cb101ec7c40f2c49e1d9714d64511d8e1b74de` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.38.0` | `4.38.1` |
Updates `github/codeql-action/init` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd )
Updates `github/codeql-action/autobuild` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd )
Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd )
Updates `dtolnay/rust-toolchain` from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases )
- [Commits](https://github.com/dtolnay/rust-toolchain/compare/6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772...02cb101ec7c40f2c49e1d9714d64511d8e1b74de )
Updates `github/codeql-action/upload-sarif` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: dtolnay/rust-toolchain
dependency-version: 02cb101ec7c40f2c49e1d9714d64511d8e1b74de
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-23 12:19:42 +00:00
Devid and GitHub
62987f035c
Merge pull request #13 from masdevid/dependabot/cargo/minor-and-patch-78de0ddba4
...
chore(deps): bump the minor-and-patch group with 2 updates
2026-09-18 04:17:37 +07:00
Devid and GitHub
5420713bbb
Merge branch 'master' into dependabot/cargo/minor-and-patch-78de0ddba4
2026-09-18 04:16:21 +07:00
Devid and GitHub
5eab5feccb
Merge pull request #14 from masdevid/dependabot/github_actions/github-actions-6b15e67bac
...
chore(deps): bump the github-actions group with 4 updates
2026-09-18 04:15:43 +07:00
dependabot[bot] and GitHub
fdbaeb68a5
chore(deps): bump the github-actions group with 4 updates
...
Bumps the github-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action ), [github/codeql-action/autobuild](https://github.com/github/codeql-action ), [github/codeql-action/analyze](https://github.com/github/codeql-action ) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ).
Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63 )
Updates `github/codeql-action/autobuild` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63 )
Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63 )
Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63 )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 12:18:41 +00:00
dependabot[bot] and GitHub
be41b43703
chore(deps): bump the minor-and-patch group with 2 updates
...
Bumps the minor-and-patch group with 2 updates: [uuid](https://github.com/uuid-rs/uuid ) and [encoding_rs](https://github.com/hsivonen/encoding_rs ).
Updates `uuid` from 1.26.0 to 1.26.1
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.26.0...v1.26.1 )
Updates `encoding_rs` from 0.8.35 to 0.8.41
- [Commits](https://github.com/hsivonen/encoding_rs/compare/v0.8.35...v0.8.41 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 1.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: encoding_rs
dependency-version: 0.8.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 12:14:11 +00:00
Devid and GitHub
186b846936
Merge pull request #12 from masdevid/dependabot/cargo/dirs-7.0.0
...
chore(deps): bump dirs from 6.0.0 to 7.0.0
2026-09-10 03:06:34 +07:00
Devid and GitHub
b9ad93f873
Merge branch 'master' into dependabot/cargo/dirs-7.0.0
2026-09-10 03:00:31 +07:00
Devid and GitHub
16f10805f3
Merge pull request #11 from masdevid/dependabot/cargo/minor-and-patch-8d2c85db1c
...
chore(deps): bump uuid from 1.25.0 to 1.26.0 in the minor-and-patch group
2026-09-10 03:00:14 +07:00
dependabot[bot] and GitHub
2ee8a72fe0
chore(deps): bump dirs from 6.0.0 to 7.0.0
...
Bumps dirs from 6.0.0 to 7.0.0.
---
updated-dependencies:
- dependency-name: dirs
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-09 12:14:45 +00:00
dependabot[bot] and GitHub
868752d39f
chore(deps): bump uuid in the minor-and-patch group
...
Bumps the minor-and-patch group with 1 update: [uuid](https://github.com/uuid-rs/uuid ).
Updates `uuid` from 1.25.0 to 1.26.0
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/1.25.0...v1.26.0 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 1.26.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-09 12:14:42 +00:00
Devid and GitHub
cc464e85ad
Merge pull request #10 from masdevid/dependabot/github_actions/github-actions-7c7a268a88
...
chore(deps): bump the github-actions group with 5 updates
2026-09-02 19:33:44 +07:00
Devid and GitHub
f87735538b
Merge pull request #9 from masdevid/dependabot/cargo/minor-and-patch-0d901d6848
...
chore(deps): bump uuid from 1.24.1 to 1.25.0 in the minor-and-patch group
2026-09-02 19:33:39 +07:00
dependabot[bot] and GitHub
af7715621d
chore(deps): bump the github-actions group with 5 updates
...
Bumps the github-actions group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.37.8` | `4.37.9` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action ) | `4.37.8` | `4.37.9` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.37.8` | `4.37.9` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) | `3.0.2` | `3.0.3` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.37.8` | `4.37.9` |
Updates `github/codeql-action/init` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938 )
Updates `github/codeql-action/autobuild` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938 )
Updates `github/codeql-action/analyze` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938 )
Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/3d0d9888cb7fd7b750713d6e236d1fcb99157228...efb35369e0ad2afab669f228072c1b0d510eae64 )
Updates `github/codeql-action/upload-sarif` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938 )
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.37.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.37.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-02 12:19:43 +00:00
dependabot[bot] and GitHub
6647b189ec
chore(deps): bump uuid in the minor-and-patch group
...
Bumps the minor-and-patch group with 1 update: [uuid](https://github.com/uuid-rs/uuid ).
Updates `uuid` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.24.1...1.25.0 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 1.25.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-26 12:15:19 +00:00
Devid HW
7eace36bb6
refactor: extract CII helper into standalone masdevid/cii-best-practices skill
...
scripts/cii_criteria.py and scripts/cii_justifications.json moved to the
new dedicated repo, generalized for any project:
https://github.com/masdevid/cii-best-practices
Install as an agent skill with:
npx skills add masdevid/cii-best-practices
2026-08-26 06:28:49 +07:00
Devid HW
302a0c5624
fix(ci): move GPG signing guard out of step if: — secrets context invalid there
...
Referencing secrets.* in a step-level if: expression makes GitHub reject
the whole workflow file at parse time: every push to any branch produced
a startup-failure run for release.yml with zero jobs ('Code Scanning
could not...' style runs named .github/workflows/release.yml). The tags
trigger was irrelevant because an unparseable workflow has no readable
triggers.
Fix: evaluate the both-secrets-present check in job-level env (where the
secrets context IS allowed) and test env.HAS_GPG_SECRETS in the step if:.
Behavior unchanged: sign when both secrets exist, ship unsigned otherwise.
2026-08-26 05:14:50 +07:00
Devid HW
608b07cead
fix(ci): satisfy rustfmt and clippy after bin+lib split
...
The Rust workflow lint job failed on master:
- cargo fmt --check: imports in src/main.rs were misordered
(mcp_server/models/pipeline lines out of alphabetical order,
McpError/McpRequest/McpResponse tuple unsorted) from b843146 .
- cargo clippy -D warnings: clippy::new_without_default now fires on
DealAnalyzer, ReportExtractor, OptimizationParser, StageExecutor
and McpServer because the lib target (src/lib.rs) makes their
pub constructors part of the public API.
Fix: reorder main.rs imports per rustfmt; add Default impls
delegating to new() for the five types.
2026-08-26 05:02:44 +07:00
Devid HW
6db5460b99
docs: add required URLs to legacy CII justifications (report_archive, vulnerability_report_process, contribution_requirements)
2026-08-26 04:51:29 +07:00
Devid HW
fcf7ac26dc
fix: use correct OSPS form-field names in CII edit URLs
2026-08-26 04:26:46 +07:00
Devid HW
09b4fbd831
feat: support OSPS Baseline schema in CII criteria script
2026-08-26 03:40:16 +07:00
Devid HW
3cbb5b00a7
ci: enable manual workflow_dispatch for Scorecard rescan
2026-08-26 03:28:40 +07:00
Devid HW
65b0346628
feat: auto-open generated bestpractices.dev URL in browser when run interactively
2026-08-26 03:26:38 +07:00
Devid HW
c65c4b5d1c
docs: add SECURITY.md and GPG release signing for OpenSSF passing badge
...
Satisfies vulnerability_report_process/know_secure_design/know_common_errors via SECURITY.md; delivery_unsigned via GPG-signed releases (public key in docs/signing-key.asc); N/A justifications for the 4 N/A-able MUST criteria (crypto_password_storage, vulnerability_report_private, vulnerability_report_response, release_notes_vulns). Backs the OpenSSF Best Practices passing badge and closes the CIIBestPracticesID alert.
2026-08-26 03:17:38 +07:00
Devid HW
b843146554
test: add cargo-fuzz fuzzing harness
...
adds lib target + cargo-fuzz fuzz targets exercising pure parsers; backs dynamic_analysis criteria and the Scorecard fuzzing check.
2026-08-26 02:58:06 +07:00
Devid HW
d8b0b37919
docs: add CONTRIBUTING.md and CII best-practices criteria helper
...
The scripts/cii_criteria.py helper fetches bestpractices.dev criteria
and generates pre-filled edit URLs for each criterion, streamlining
badge maintenance. CONTRIBUTING.md backs the contribution and testing
criteria referenced by the CII best-practices submission.
2026-08-26 02:38:16 +07:00
Devid HW
38d897d52f
ci: trigger scorecard rescan after adding strict-status ruleset
2026-08-25 15:43:29 +07:00
Devid HW
e3b04f51b6
ci: rescan scorecard after strict branch-protection settled
2026-08-25 12:00:14 +07:00
Devid HW
66f728d545
ci: trigger scorecard rescan for tightened branch-protection
2026-08-25 11:56:33 +07:00
Devid HW
06a4f8b87d
ci: trigger scorecard rescan for branch-protection update
2026-08-25 11:35:51 +07:00
Devid HW
ac50ae7bae
ci: declare explicit least-privilege permissions (fix Token-Permissions)
2026-08-25 10:44:44 +07:00
Devid HW
dece88c514
ci: trigger OpenSSF Scorecard workflow
2026-08-25 10:39:16 +07:00
Devid HW
2951f372e3
ci: enable CodeQL + add code-scanning badge
2026-08-25 10:36:18 +07:00
Devid HW
3c6da1d1d2
ci(scorecard): auto-publish badge.json to badges branch
2026-08-25 10:36:05 +07:00
Devid HW
64cdc30df7
docs(readme): use static scorecard badge (shields ossf backend broken upstream)
2026-08-25 10:30:22 +07:00
Devid HW
5c4bb2a863
docs(readme): activate CII Best Practices badge (id 14227)
2026-08-25 10:23:27 +07:00
Devid HW
5c2b4c52a0
docs(readme): add CII Best Practices badge (placeholder until enrollment)
2026-08-25 10:09:40 +07:00
Devid HW
e2cdd0684b
ci: pin mcp-publisher download
2026-08-25 09:50:08 +07:00
Devid HW
8a56394f1c
ci(release): support RELEASE_PAT for approval-free bot PRs (falls back to GITHUB_TOKEN)
2026-08-25 09:32:18 +07:00
Devid HW
845fce7d68
docs: add documentation index and README navigation
2026-08-25 09:25:30 +07:00
Devid HW
019ddf7c21
docs(readme): copyable install instructions for major LLM clients
2026-08-25 09:23:53 +07:00
Devid HW
599dcb14ba
fix(release): attest final release artifacts instead of pre-repackage builds
2026-08-25 09:13:43 +07:00
89d7ff5186
ci: update server.json SHA256 for v1.34.3 ( #8 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-08-25 02:03:12 +00:00
Devid HW
3baf0e3271
release: v1.34.3
...
- Version bump 1.34.2 → 1.34.3
- server.json identifier URL updated (SHA256 set by CI after build)
- CHANGELOG.md updated
v1.34.3
2026-08-25 08:19:10 +07:00
55f072da4d
chore(deps): bump dirs from 5.0.1 to 6.0.0 ( #6 )
...
* chore(deps): bump dirs from 5.0.1 to 6.0.0
Bumps [dirs](https://github.com/soc/dirs-rs ) from 5.0.1 to 6.0.0.
- [Commits](https://github.com/soc/dirs-rs/commits )
---
updated-dependencies:
- dependency-name: dirs
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix(deps): regenerate Cargo.lock to resolve duplicate thiserror entry
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Devid <devid.wahid@gmail.com >
2026-08-25 07:59:40 +07:00
e97e5bbd63
chore(deps): bump base64 from 0.22.1 to 0.23.1 ( #4 )
...
Bumps [base64](https://github.com/marshallpierce/rust-base64 ) from 0.22.1 to 0.23.1.
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md )
- [Commits](https://github.com/marshallpierce/rust-base64/compare/v0.22.1...v0.23.1 )
---
updated-dependencies:
- dependency-name: base64
dependency-version: 0.23.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-25 07:53:00 +07:00