Skip to content

v2.2.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 15:42
· 6 commits to main since this release
v2.2.2
This tag was signed with the committer’s verified signature.
fjacquet Frederic Jacquet
GPG key ID: 174824175B04A09B
Verified
Learn about vigilant mode.
cc00f67
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • make vuln and the Security workflow now actually scan. uvx osv-scanner never resolved
    (osv-scanner is a Go binary, not on PyPI) and || true hid the failure, so no CI run had ever
    scanned uv.lock. make vuln now runs osv-scanner scan source --recursive . and fails on
    findings; fjacquet/ci v1.6.0 installs a pinned, checksum-verified binary in CI.
  • Full uv lock --upgrade refresh; no open advisory.
Assets 2
Loading