pullrequests Search Results · language:Dune language:JavaScript language:Java language:JavaScript language:Python language:Java
Filter by
184M results
What
Clears the failing Dependency Audit security job. CodeQL has 0 open alerts.
Fixed — 7 CVEs via version bumps
| Package | Floor | CVE(s) |
| --- | --- | --- |
| cryptography | =48.0.1 (→49.0.0) ...
security
Bumps zizmorcore/zizmor-action from 0.5.6 to 0.5.7. details summary Release notes /summary p em Sourced from a href=
https://github.com/zizmorcore/zizmor-action/releases zizmorcore/zizmor-action s releases ...
dependencies
github_actions
Bumps actions/setup-python from 6.2.0 to 6.3.0. details summary Release notes /summary p em Sourced from a href=
https://github.com/actions/setup-python/releases actions/setup-python s releases /a . /em ...
dependencies
github_actions
Motivation
- Prevent accidental disclosure of credential-bearing pip global.index-url values during setup.sh --uninstall by
removing the echo of the raw URL while preserving the existing uninstall ...
aardvark
codex
背景
「🔎 資料診斷」Tab 最上方的覆蓋率表(data_coverage._macro_keys)與 tab_macro 寫入端的 has-data 判定(_macro_has_data),原本各自寫死同一份 6 個核心 macro_info
key(vix / ism_pmi / us_core_cpi / fed_funds / ndc_signal / tw_export)。
這正是 v18.282 ...
Bumps github/codeql-action/analyze from 4.35.1 to 4.36.2. details summary Release notes /summary p em Sourced from a
href= https://github.com/github/codeql-action/releases github/codeql-action/analyze ...
dependencies
github_actions
Bumps gradle-wrapper from 9.6.0 to 9.6.1. details summary Release notes /summary p em Sourced from a href=
https://github.com/gradle/gradle/releases gradle-wrapper s releases /a . /em /p blockquote h2 ...
dependencies
java
Bumps github/codeql-action/analyze from 4.36.0 to 4.36.2. details summary Release notes /summary p em Sourced from a
href= https://github.com/github/codeql-action/releases github/codeql-action/analyze ...
dependencies
github_actions
Follow-up to #128. With the IPv4 backend fix in place, the weather happy-path resolved a location but returned an empty
daily array - because the demo trip was hardcoded to Sept 2026, outside Open-Meteo ...