From 328fae9df2eb0c15488f972cf2ea06f22703f64c Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 21 Apr 2026 07:17:17 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/upload-pages-artifact from v3 to v5 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Supersedes #76 (same Dependabot SONAR_TOKEN issue as #71/#75). The v4 release excludes hidden files (dotfiles) by default. The workflow uploads docs/site/, which contains only index.html — no dotfiles — so the breaking change does not affect this pipeline. https://claude.ai/code/session_01R2n6wKqFkYPvHkwaip8EnJ --- .github/workflows/pages.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 034b8fa..5a67528 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -24,7 +24,7 @@ jobs: - name: Copy site run: cp -r docs/site _site - uses: actions/configure-pages@v4 - - uses: actions/upload-pages-artifact@v3 + - uses: actions/upload-pages-artifact@v5 with: path: _site - id: deployment From 59dad9d9999a1ce375344d0a0a7dec266ed13485 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 23 Apr 2026 03:03:32 +0000 Subject: [PATCH 2/2] chore(deps): bump rustls-webpki to 0.103.13 for RUSTSEC-2026-0104 Fresh transitive advisory: panic during CRL parsing. Blocks License & Supply Chain and Dependency Audit on main, not specific to this PR. Folding the fix here to unblock CI. https://claude.ai/code/session_01R2n6wKqFkYPvHkwaip8EnJ --- mc/Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mc/Cargo.lock b/mc/Cargo.lock index e5a3691..62292ed 100644 --- a/mc/Cargo.lock +++ b/mc/Cargo.lock @@ -1784,9 +1784,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.12" +version = "0.103.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8279bb85272c9f10811ae6a6c547ff594d6a7f3c6c6b02ee9726d1d0dcfcdd06" +checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e" dependencies = [ "ring", "rustls-pki-types",