fix(ci): audit both pipelines for false positives, false negatives, warnings and errors - #302

Merged

konard merged 18 commits into

mainfrom

issue-301-ef35bbf03fb8

Sep 2, 2026

Commits on Sep 2, 2026

Initial commit with task details
konard
committed
5f5f8c2
fix(ci): survive Node 24 CommonJS namespaces when loading command-stream
konard
committed
2122536
fix(ci): lint the workflows and fix everything the linters found
konard
committed
d3bdf85
fix(ci): pin npm to the tested major and verify OIDC support
konard
committed
132bc74
test(ci): accept per-job concurrency groups and catch cancellable writers
konard
committed
92ce582
fix(deps): remove the unused @actions packages and the vulnerable undici
konard
committed
5c498b2
fix(ci): scan dependencies and fail runs whose jobs were cancelled
konard
committed
89783bb
fix(deps): update h2 to a version without RUSTSEC-2026-0258
konard
committed
b0a0505
fix(ci): clear AI SDK prompt-injection and Windows CRLF warnings
konard
committed
8ddfd1b
fix(ci): own step deadlines and scope concurrency per job
konard
committed
acb8ea7
ci: adopt the broken link checker from the pipeline templates
konard
committed
7a9f209
docs(dev/log): compile issue #301 evidence and analysis
konard
committed
2338fbb
docs(dev/log): record the template inventories the comparison used
konard
committed
904c0c4
docs(dev/log): record the three upstream reports filed for issue #301
konard
committed
11273e1
chore: describe the CI/CD audit in the pending changeset
konard
committed
a396d4b
fix(ci): do not fail dependency review when the dependency graph is off
konard
committed
9e5131f
docs(dev/log): record the dependency-graph false positive (RC11)
konard
committed
170ea62
docs(dev/log): verify the node-domexception chain has no clean version
konard
committed
ff355a4

Navigation Menu

fix(ci): audit both pipelines for false positives, false negatives, warnings and errors - #302

fix(ci): audit both pipelines for false positives, false negatives, warnings and errors#302
konard merged 18 commits into
mainfrom
issue-301-ef35bbf03fb8

Commits on Sep 2, 2026

Initial commit with task details

fix(ci): survive Node 24 CommonJS namespaces when loading command-stream

fix(ci): lint the workflows and fix everything the linters found

fix(ci): pin npm to the tested major and verify OIDC support

test(ci): accept per-job concurrency groups and catch cancellable writers

fix(deps): remove the unused @actions packages and the vulnerable undici

fix(ci): scan dependencies and fail runs whose jobs were cancelled

fix(deps): update h2 to a version without RUSTSEC-2026-0258

fix(ci): clear AI SDK prompt-injection and Windows CRLF warnings

fix(ci): own step deadlines and scope concurrency per job

ci: adopt the broken link checker from the pipeline templates

docs(dev/log): compile issue #301 evidence and analysis

docs(dev/log): record the template inventories the comparison used

docs(dev/log): record the three upstream reports filed for issue #301

chore: describe the CI/CD audit in the pending changeset

fix(ci): do not fail dependency review when the dependency graph is off

docs(dev/log): record the dependency-graph false positive (RC11)

docs(dev/log): verify the node-domexception chain has no clean version