aaronrene / knowtation public
fix patch ci feat/phase-2g-bundle
AI Agent git-import/068377df · 108 days ago · Apr 10, 2026 · Diff

fix(ci): bridge path-to-regexp CVE + dependency-review on private repo

- Run npm audit fix in hub/bridge (was missed in Phase 3.6 — only root and hub/gateway were fixed). All three directories now 0 vulnerabilities. - Add continue-on-error to dependency-review workflow — requires GitHub Advanced Security on private repos; npm audit in ci.yml already covers the same CVEs, so this is supplementary and should not block PRs.

sha256:bce40bb7e58dd032b628ff7ac038294d06a1db5ee5fc0a5801aeaa943981fb6a sha
sha256:64cd1c214542fa0ad7b30eb713664bee35515147014679e96b65d4bda712d3fe parent
sha256:88f7a35a81de896a49c7f87c4672509d1361902abd12c75909971f1603b02141 snapshot
← Older Oldest on feat/phase-2g-bundle
All commits
Newer → Latest on feat/phase-2g-bundle

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:bce40bb7e58dd032b628ff7ac038294d06a1db5ee5fc0a5801aeaa943981fb6a --body "your comment"