Skip to content

fix(security): resolve Dependabot, Scorecard and CodeQL alerts - #1518

Merged
dekobon merged 8 commits into
mainfrom
fix/security-alerts-2026-10-07
Oct 7, 2026
Merged

dekobon merged 8 commits into
mainfrom
fix/security-alerts-2026-10-07

fix(ci): stop CodeQL tainting the HMAC key field

95e6e4b
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Oct 7, 2026 in 1s

98.02% (+0.00%) compared to 9008842

View this Pull Request on Codecov

98.02% (+0.00%) compared to 9008842

Details

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.02%. Comparing base (9008842) to head (95e6e4b).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main    #1518   +/-   ##
=======================================
  Coverage   98.01%   98.02%           
=======================================
  Files         359      359           
  Lines       96210    96210           
  Branches    95779    95779           
=======================================
+ Hits        94303    94312    +9     
+ Misses       1222     1214    -8     
+ Partials      685      684    -1     
Files with missing lines Coverage Δ
src/vcs/options.rs 98.91% <ø> (ø)

... and 2 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.