Diego Rodrigues de Sa e Souza a3c19dd27c fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch (#12085) ...

Validated: actionlint clean on all three touched workflows, check-api-typecheck.mjs OK (289 pre-existing, all frozen) after boarding on top of #12094. Confirmed the .trivyignore justification against the documented CVE Variance process (docs/security/SUPPLY_CHAIN.md) — has tracking issue #12084, expiry before the v3.8.51 tag, and a real technical reason the .so can't be rebuilt in this repo. Scorecard branch guard correctly targets the actual default branch (release/vX.Y.Z), not a hardcoded main.

2026-08-30 04:51:48 -03:00

..

api-route-typecheck.yml

ci: add API route TypeScript regression gate (#11705)

2026-08-30 04:07:28 -03:00

build.yml

fix(ci): take the two hosted-runner builds off the PR rail (#11946, option 3) (#11962)

2026-08-28 22:52:15 -03:00

ci.yml

fix(ci): drop the stale ESLint cache restore-keys fallback from ci.yml (#11600) (#11996)

2026-08-29 15:27:39 -03:00

claude.yml

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

codeql.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

dast-smoke.yml

fix(ci): take the two hosted-runner builds off the PR rail (#11946, option 3) (#11962)

2026-08-28 22:52:15 -03:00

deploy-vps.yml

Release v3.8.13 (#3327)

2026-06-06 19:13:11 -03:00

docker-publish.yml

fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch (#12085)

2026-08-30 04:51:48 -03:00

electron-release.yml

fix(release): electron lockfile resync, build_ref, curated notes and SBOM on dispatch (twin of #11982 + #12020) (#12022)

2026-08-29 09:28:03 -03:00

lock-released-branch.yml

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mutation-redundancy.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-compat.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-llm-security.yml

fix(ci): run the build-bearing nightly jobs on the box's light pool (#11965) (#11967)

2026-08-28 23:26:52 -03:00

nightly-mutation.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-property.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

nightly-release-green.yml

fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch (#12085)

2026-08-30 04:51:48 -03:00

nightly-resilience.yml

fix(ci): run the build-bearing nightly jobs on the box's light pool (#11965) (#11967)

2026-08-28 23:26:52 -03:00

nightly-schemathesis.yml

fix(ci): run the build-bearing nightly jobs on the box's light pool (#11965) (#11967)

2026-08-28 23:26:52 -03:00

npm-publish.yml

fix(release): electron lockfile resync, build_ref, curated notes and SBOM on dispatch (twin of #11982 + #12020) (#12022)

2026-08-29 09:28:03 -03:00

opencode-plugin-ci.yml

Release v3.8.50

2026-08-26 14:25:01 -03:00

opencode-provider-ci.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

quality.yml

fix(ci): stop hosted docker-publish OOM and unpaint Build (advisory) (#12021)

2026-08-29 09:52:00 -03:00

radar-export.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

scorecard.yml

fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch (#12085)

2026-08-30 04:51:48 -03:00

semgrep.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

wiki-sync.yml

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00