diegosouzapw 8adf34bada fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch ...

- .trivyignore: CVE-2025-68121 (Go stdlib crypto/tls inside bogdanfinn/tls-client
  v1.15.1, built with go 1.24.1) with justification, expiry and tracker #12084.
  No upstream rebuild exists; the blocking Trivy gate now also names the ignore
  file explicitly.
- nightly-release-green: close the "not green" issue when the validation passes
  again (the workflow only ever opened/commented it, so stale issues outlived
  the fix and stamped new PRs as base-red inherited).
- scorecard: the action only accepts the DEFAULT branch (the active release
  branch, not main) - guard the job on it so pushes to main stop failing.

Refs #12084

2026-08-30 01:52:04 -03:00

..

actions/npm-ci-retry

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

ISSUE_TEMPLATE

node dependency updates (#2259)

2026-05-14 20:20:54 -03:00

workflows

fix(ci): accept CVE-2025-68121 in the prebuilt tls-client .so, auto-close base-red issues, guard Scorecard on the default branch

2026-08-30 01:52:04 -03:00

CODEOWNERS

chore: optimize local git hooks and fix T11 any budget strictness

2026-04-06 00:29:54 -03:00

copilot-instructions.md

chore: optimize local git hooks and fix T11 any budget strictness

2026-04-06 00:29:54 -03:00

dependabot.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

FUNDING.yml

Release v3.8.23

2026-06-12 23:49:22 -03:00

pull_request_template.md

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00