allaun/Research-Stack
1
0
Fork 0
mirror of https://github.com/allaunthefox/Research-Stack.git synced 2026-07-31 03:05:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
805 commits 18 branches 0 tags 425 MiB
Commit graph

5 commits

Author SHA1 Message Date
allaun
e6e241746c fix(deps): audit-driven updates across npm, pnpm, cargo, pip 
JavaScript lockfiles:
- bezier-kit: vitest 3.2.4→3.2.6, @babel/core 7.29.0→7.29.7,
  esbuild 0.27.7→0.27.2, vite 6.4.2→6.4.3
- parametric-learn: vite 8.0.10→8.0.16, form-data 4.0.5→4.0.6
- lytenyte-storage + cluster-dashboard/frontend: vite 6.4.2→6.4.3

Cargo lockfiles:
- leechy-py: pyo3 0.28.3→0.29.0 (RUSTSEC-2026-0176/0177)
- stract: rkyv 0.7.45→0.7.46 (RUSTSEC-2026-0001)
- rs-surface, ene-rds, ene-session-sync: postgres updates
- shared-data/namidb: aws-lc-sys 0.37.1→0.41.0

Python:
- whoogle-search: cryptography 46.0.7→48.0.1 (GHSA-537c-gmf6-5ccf)

Remaining blocked advisories documented in commit body metadata;
require upstream releases or source-level migrations.
 2026-06-20 19:00:38 -05:00
Brandon Schneider
65d0ddb12a fix(deps): update tar to v0.4.46 and refresh npm packages 
Resolves GHSA-9rg2-7cm8 (PAX header desynchronization) in:
- 2-Search-Space/search/stract/Cargo.lock
- 4-Infrastructure/servo-fetch/Cargo.lock

Note: @ai-sdk/provider-utils in dify-ai-provider nested dep (3.0.25)
has no fix available yet; tracked in GHSA-866g-f22w-33x8
 2026-05-30 00:37:43 -05:00
dependabot[bot]
a442e24081 Bump the cargo group across 3 directories with 1 update 
Bumps the cargo group with 1 update in the /2-Search-Space/search/stract directory: [openssl](https://github.com/rust-openssl/rust-openssl).
Bumps the cargo group with 1 update in the /2-Search-Space/search/stract/crates/leechy-py directory: [openssl](https://github.com/rust-openssl/rust-openssl).
Bumps the cargo group with 1 update in the /5-Applications/teleport-kanban directory: [openssl](https://github.com/rust-openssl/rust-openssl).

Updates `openssl` from 0.10.79 to 0.10.80
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.79...openssl-v0.10.80)

Updates `openssl` from 0.10.79 to 0.10.80
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.79...openssl-v0.10.80)

Updates `openssl` from 0.10.79 to 0.10.80
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.79...openssl-v0.10.80)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.80
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.80
  dependency-type: indirect
  dependency-group: cargo
- dependency-name: openssl
  dependency-version: 0.10.80
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 4163e69bafc86fd27dc4535747c75e39db822f57)
 2026-05-20 23:02:48 -05:00
Brandon Schneider
eb50a316b4 Fix Dependabot dependency alerts 2026-05-08 15:04:30 -05:00
Brandon Schneider
5f88abf618 initial: sovereign research stack (consolidated, weightless, and lfs-optimized) 2026-05-04 18:11:36 -05:00