chore(deps): Bump config from 0.15.22 to 0.15.23 in /components/core

[dependabot]

Bumps config from 0.15.22 to 0.15.23.

Changelog

Sourced from config's changelog.

[0.15.23] - 2026-05-14

Fixes

• Environment::convert_case: correctly apply casing to each key segment

Commits

• 9053d29 chore: Release config version 0.15.23
• e194797 docs: Update changelog
• 40f2698 fix(env): apply convert_case to each nested key segment (#754)
• c2920ac fix(env): apply convert_case to each nested key segment
• 06d760e test: capture missing nested-segment case conversion in Environment
• e7e72cc chore(deps): Update pre-commit hook crate-ci/typos to v1.46.0 (#753)
• 16a85fa chore(deps): Update compatible (dev) (#752)
• 53c9e30 chore(deps): Update pre-commit hook crate-ci/typos to v1.46.0
• 7f4482c chore(deps): Update Rust Stable to v1.95 (#750)
• 33f0b36 chore(deps): Update Rust crate yaml-rust2 to 0.11.0 (#749)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 Hypatia Security Scan

Findings: 31 issues detected

Severity	Count
🔴 Critical	2
🟠 High	17
🟡 Medium	12

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in quality.yml",
    "type": "missing_workflow",
    "file": "quality.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in security-policy.yml",
    "type": "missing_workflow",
    "file": "security-policy.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in container-policy.yml",
    "type": "npermissions_typo",
    "file": "container-policy.yml",
    "action": "fix_typo",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Port.open spawn -- validate command before execution (1 occurrences, CWE-78)",
    "type": "elixir_port_open_shell",
    "file": "/home/runner/work/academic-workflow-suite/academic-workflow-suite/components/backend/lib/awap_backend/core_bridge.ex",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "Wildcard CORS -- restrict to specific origins or use env var (1 occurrences, CWE-942)",
    "type": "js_wildcard_cors",
    "file": "/home/runner/work/academic-workflow-suite/academic-workflow-suite/components/office-addin/webpack.config.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (2 occurrences, CWE-79)",
    "type": "js_innerhtml",
    "file": "/home/runner/work/academic-workflow-suite/academic-workflow-suite/examples/demos/web-ui/app.js",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "unwrap() without prior check -- DoS via panic (24 occurrences, CWE-754)",
    "type": "unwrap_without_check",
    "file": "/home/runner/work/academic-workflow-suite/academic-workflow-suite/monitoring/exporters/aws_exporter.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "unwrap() without prior check -- DoS via panic (1 occurrences, CWE-754)",
    "type": "unwrap_without_check",
    "file": "/home/runner/work/academic-workflow-suite/academic-workflow-suite/components/core/src/feedback.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "expect() in hot path (5 occurrences, CWE-754)",
    "type": "expect_in_hot_path",
    "file": "/home/runner/work/academic-workflow-suite/academic-workflow-suite/components/core/src/security.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence