Repository navigation

fix(security): resolve Dependabot, Scorecard and CodeQL alerts - #1518

Merged

dekobon merged 8 commits into

mainfrom

fix/security-alerts-2026-10-07

Oct 7, 2026

Merged

fix(security): resolve Dependabot, Scorecard and CodeQL alerts#1518
dekobon merged 8 commits into
mainfrom
fix/security-alerts-2026-10-07

Commits on Oct 7, 2026
- chore(deps): bump jupyterlab 4.6.4, notebook 7.6.3
  dekobon
  committed
  03540ac
- chore(deps): bump faster-hex to 0.10.1
  dekobon
  committed
  1ef3e6e
- chore(deps): bump jupyter-server to 2.21.1
  dekobon
  committed
  e0a303f
- docs(vcs): note CodeQL HMAC-key false positive
  dekobon
  committed
  1d7ae3e
- chore(deny): report unsound advisories graph-wide
  dekobon
  committed
  6ce55d4
- docs(changelog): record faster-hex RUSTSEC bump
  dekobon
  committed
  f37db52
- docs(vcs): name both CodeQL taint sources
  dekobon
  committed
  449d9ee
- fix(ci): stop CodeQL tainting the HMAC key field
  dekobon
  committed
  95e6e4b