Repository navigation

fix(deps,ci): remediate transitive advisories and pin workflow scanner - #7984

Closed

KooshaPari wants to merge 14 commits into

cheaper-inference:release/v3.8.49from

KooshaPari:agent/7977-zizmor-pin

Closed

fix(deps,ci): remediate transitive advisories and pin workflow scanner#7984
KooshaPari wants to merge 14 commits into
cheaper-inference:release/v3.8.49from
KooshaPari:agent/7977-zizmor-pin

Commits on Jul 14, 2026
- chore(ci): add .mergify.yml to main — Mergify only reads config from the default branch (#7168)
  diegosouzapw
  authored
  01ab5d1
- fix(ci): add the auto-enqueue pull_request_rule to the Mergify config (queue_conditions alone are eligibility-only) (#7179)
  diegosouzapw
  authored
  fb24740
Commits on Jul 15, 2026
Commits on Jul 16, 2026
- test(ci): make the #6634 selfref guard hermetic — main's copy hard-fails every PR (#7341)
  
  diegosouzapw
  and
  growab
  authored
  0065f1b
- chore(quality): tighten main's coverage baseline to the CI's real numbers (#7347)
  diegosouzapw
  authored
  ddd6d09
Commits on Jul 17, 2026
- Add cliproxy provider exposure controls and manifest injection (#7329)
  
  authored
  66c56ec
- test(ci): static body in codex e2e mock route bridge (CodeQL #737) (#7559)
  diegosouzapw
  authored
  8e383f5
Commits on Jul 19, 2026
- fix(security): bump adm-zip >=0.6.0 + exact host matching in mitm DNS test (#7733)
  diegosouzapw
  authored
  698b6eb
Commits on Jul 21, 2026
- fix(deps): patch vulnerable transitive tar/shell-quote/js-yaml/brace-expansion (Dependabot #107-#123)
  diegosouzapw
  committed
  d8af4e1
- Pin zizmor to 1.25.2
  KooshaPari
  committed
  a500318
- test: recover formatting utility coverage
  KooshaPari
  committed
  7f47514
- test: use lightweight liveness readiness probe
  KooshaPari
  committed
  c99f204