v5.1.11

What's Changed

• feat(web): show repository index job runtime by @brendan-kellam in #1623
• chore: add agent notes column to CVE remediation run summary by @brendan-kellam in #1620
• chore: upgrade browserslist to ^4.28.8 to address CVE-2026-73088, CVE-2026-73089 by @claude[bot] in #1624
• chore: upgrade postcss-selector-parser to ^6.1.4 to address CVE-2026-9358 by @claude[bot] in #1625
• chore: upgrade fast-uri to 3.1.7 to address CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172 by @claude[bot] in #1626
• chore: upgrade qs to 6.16.0 to address CVE-2026-82417, CVE-2026-82562 by @claude[bot] in #1627
• chore: update bundled Zoekt by @sourcebot-release-bot[bot] in #1628
• chore: update bundled Zoekt by @sourcebot-release-bot[bot] in #1640
• chore: upgrade fflate to 0.4.9 to address CVE-2026-45820 by @claude[bot] in #1629
• chore: upgrade @humanfs/node to 0.16.8 to address GHSA-p498-v437-472g by @claude[bot] in #1630
• chore: upgrade js-yaml to 4.3.2 to address CVE-2026-84375 by @claude[bot] in #1636
• chore: upgrade vitest to 4.1.11 to address CVE-2026-84373 by @claude[bot] in #1637
• chore: upgrade sharp to 0.35.4 to address GHSA-rgj7-g3m4-5g8c, CVE-2026-84383, GHSA-2jg2-4ch7-h545 by @claude[bot] in #1638
• fix(web): preserve Idira issuer trailing slash by @brendan-kellam in #1641

Full Changelog: v5.1.10...v5.1.11