John Smith 1aedb5ce0e fix(security): resolve devalue advisory, scan alerts, sidecar auth gate ...

- Bump devalue override to >=5.9.2 (closes #89)
- Eliminate Semgrep alerts and align SARIF upload filter (closes #68, closes #88)
- Guard binary plugin sidecar assets with ACL check and private cache (closes #91)
- Fix Windows installer Rust candidates immutable borrow error (closes #90)
- Document session token digest invariant

2026-09-17 21:11:13 -04:00

..

workflows

fix(security): resolve devalue advisory, scan alerts, sidecar auth gate

2026-09-17 21:11:13 -04:00

dependabot.yml

chore(deps): enforce release-age cooldowns and trusted sources

2026-09-15 09:36:04 -04:00