Skip to content

Weekly security check; update certifi and dashboard dependencies - #13

Merged
alexeybe1kin merged 1 commit into
mainfrom
chore/weekly-security-check
Oct 22, 2026
Merged

alexeybe1kin merged 1 commit into
mainfrom
chore/weekly-security-check

Conversation

@alexeybe1kin

Copy link
Copy Markdown
Collaborator

Adds a weekly security check: .github/workflows/security.yml audits every dependency this repository ships against the public advisory databases (pip-audit for Python, npm audit for the dashboard) every Monday, on any change to those files, and on demand. A failure is a red run, which GitHub emails out.

Also fixes what it finds today:

  • certifi 2026.6.17 → 2026.10.19 (one published advisory).
  • Dashboard lockfile via npm audit fix (Vite, React Router and build dependencies, same majors) for six published advisories. Clean npm ci and npm run build pass; npm audit reports 0.

🤖 Generated with Claude Code

The check audits the service requirements, the dashboard's npm packages
and the dashboard image's Python server every Monday and whenever they
change. certifi 2026.10.19 and npm audit fix clear the seven published
advisories it finds today.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@alexeybe1kin
alexeybe1kin merged commit 819b1be into main Oct 22, 2026
5 checks passed
@alexeybe1kin
alexeybe1kin deleted the chore/weekly-security-check branch October 22, 2026 21:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant