Niels Lohmann 8fb114e45f Bump Semgrep to 1.182.1 and allow two unfixable advisories ...

Semgrep 1.168.0 pins pyjwt~=2.13.0, which dependency-review flags
(GHSA-ffc3-869f-jxw9 and 14 more). Semgrep 1.182.1 requires
pyjwt>=2.15.0; the lock file now has pyjwt 2.15.1, mcp 1.29.0 and
click 8.4.2.

Semgrep 1.182.1 still pins mcp==1.29.0 (GHSA-84m7-p3x7-pcfv) and
opentelemetry-api~=1.37.0 (GHSA-xcq7-p3pf-p88h). Neither code path is
used by `semgrep scan` in CI, so dependency-review allows both until
Semgrep lifts its pins.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-10-23 17:14:25 +02:00

..

cancel_closed_pr_runs.yml

Bump step-security/harden-runner from 2.22.0 to 2.22.1 (#5848)

2026-10-15 20:05:28 +02:00

check_amalgamation.yml

Pin CI pip installs by hash and update KaTeX/DOMPurify

2026-10-23 07:20:44 +02:00

check_docs_links.yml

Bump step-security/harden-runner from 2.22.0 to 2.22.1 (#5848)

2026-10-15 20:05:28 +02:00

cifuzz.yml

Bump step-security/harden-runner from 2.22.0 to 2.22.1 (#5848)

2026-10-15 20:05:28 +02:00

codeql-analysis.yml

Bump the codeql-action group with 4 updates (#5895)

2026-10-23 06:53:32 +02:00

comment_check_amalgamation.yml

Fix develop CI: bit_cast ADL ambiguity and artifact-less comment runs (#5894)

2026-10-22 20:22:53 +02:00

dependency-review.yml

Bump Semgrep to 1.182.1 and allow two unfixable advisories

2026-10-23 17:14:25 +02:00

flawfinder.yml

Bump the codeql-action group with 4 updates (#5895)

2026-10-23 06:53:32 +02:00

json_view_benchmarks.yml

Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#5897)

2026-10-23 06:54:07 +02:00

labeler.yml

Bump step-security/harden-runner from 2.22.0 to 2.22.1 (#5848)

2026-10-15 20:05:28 +02:00

macos.yml

Fix the standalone release tarball; update compiler list and CITATION (#5734)

2026-10-06 22:40:10 +02:00

publish_documentation.yml

Bump step-security/harden-runner from 2.22.0 to 2.22.1 (#5848)

2026-10-15 20:05:28 +02:00

scorecards.yml

Bump the codeql-action group with 4 updates (#5895)

2026-10-23 06:53:32 +02:00

semgrep.yml

Pin CI pip installs by hash and update KaTeX/DOMPurify

2026-10-23 07:20:44 +02:00

stale.yml

Bump step-security/harden-runner from 2.22.0 to 2.22.1 (#5848)

2026-10-15 20:05:28 +02:00

ubuntu.yml

Pin CI pip installs by hash and update KaTeX/DOMPurify

2026-10-23 07:20:44 +02:00

windows.yml

Fix CI failures on develop from the API performance stack (#5860)

2026-10-16 19:16:21 +02:00