Kuzz007 0372515aa2 docs(ci): document the 2 known-accepted npm audit advisories ...

Neither is exploitable in this app (react-router CVE is RSC-only, we use
createBrowserRouter; jsx-a11y's brace-expansion chain only runs against our
own lint globs), and npm's suggested fixes are both downgrades with no real
forward patch published yet -- left as-is rather than trading a working
version for one that doesn't fix anything reachable here.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-26 12:42:02 +03:00

..

ci.yml

docs(ci): document the 2 known-accepted npm audit advisories

2026-07-26 12:42:02 +03:00

claude-bot.yml

ci(claude-bot): structure PR review and issue triage prompts

2026-07-09 15:45:07 +02:00

cleanup_caches.yml

Run cache cleanup daily and reduce cutoff to 1 day

2026-04-21 20:36:28 +02:00

codeql.yml

chore(deps): bump actions/setup-node from 6 to 7 (#5992)

2026-07-16 13:13:55 +02:00

docker.yml

chore(deps): bump actions/checkout from 6 to 7 (#5454)

2026-06-20 22:25:41 +02:00

docs-ci.yml

chore(deps): bump actions/setup-node from 6 to 7 (#5992)

2026-07-16 13:13:55 +02:00

docs-deploy.yml

chore(deps): bump actions/setup-node from 6 to 7 (#5992)

2026-07-16 13:13:55 +02:00

mutation.yml

chore(deps): bump actions/setup-go from 6 to 7 (#5995)

2026-07-16 13:14:27 +02:00

release.yml

fix(ci): drop the now-impossible .zip glob from the dev-latest upload

2026-07-25 17:08:25 +03:00

smoke.yml

fix(ci): stop executing tag-checkout code in the release smoke test

2026-07-07 01:23:10 +02:00