Repository navigation

deps(security): uv audit targeted dependency fixes - #1107

Closed

github-actions[bot] wants to merge 14 commits into

ci/uv-audit-workflowfrom

automated/uv-audit-fix

Commits on Sep 28, 2026

ci: add uv audit workflow for automated vulnerability patching
MvLieshout
committed
f811807
chore(deps)(deps): bump holidays from 0.104 to 0.105 in the python-versions group across 1 directory (#1104)
dependabot[bot]
authored
2b44a2b
Merge branch 'main' into ci/uv-audit-workflow
MvLieshout
authored
42b4c4f
fix: use correct uv audit preview features, drop nonexistent malware-check flag
MvLieshout
committed
b8ef7d1
fix: reuse a stable branch/PR for uv audit fixes instead of flooding with new PRs
MvLieshout
committed
58c58e1
fix: pause automation if the audit branch was manually edited (Dependabot-style)
MvLieshout
committed
a93e1ee
feat: add /uv-audit rebase comment command to resume paused automation
MvLieshout
committed
9ccc921
feat: document /uv-audit rebase command in PR body; temporarily trigger on push for branch testing
MvLieshout
committed
5757aa7
fix: remove unnecessary uv sync --all-groups step, which conflicts with mutually exclusive cpu/gpu extras
MvLieshout
committed
b920030
fix: only use the dependencies label, which is the only one that exists in this repo
MvLieshout
committed
21369fb
fix: rename PR/commit to deps(security), stop committing audit report/log files, capture uv lock output
MvLieshout
committed
14fdd53
feat: add real /uv-audit rebase command alongside /uv-audit recreate
MvLieshout
committed
d37f667
test: trigger uv audit workflow run
MvLieshout
committed
7d6a835
deps(security): patch vulnerable packages found by uv audit
github-actions[bot]
committed
5c6431e