Skip to content

Harden dependencies and add continuous verification - #7

Merged
Xyloth merged 1 commit into
mainfrom
hardening/dependency-ci
Aug 31, 2026
Merged

Harden dependencies and add continuous verification#7
Xyloth merged 1 commit into
mainfrom
hardening/dependency-ci

Conversation

@Xyloth

@Xyloth Xyloth commented Aug 31, 2026

Copy link
Copy Markdown
Owner

What changed

  • upgrade PDF.js past the malicious-PDF JavaScript execution advisory
  • refresh the locked dependency graph to clear current npm advisories
  • add a least-privilege GitHub Actions gate for lint, 83 deterministic tests, production build, and production dependency audit
  • surface CI status in the README

Verification

pm ci

pm run lint

pm test — 83/83 passing

pm run build

pm audit — 0 vulnerabilities

pm audit --omit=dev — 0 vulnerabilities

No product behavior or production capability claims changed.

@vercel

vercel Bot commented Aug 31, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
sourcedeck Ready Ready Preview Aug 31, 2026 2:11pm

@Xyloth
Xyloth merged commit dd35d9b into main Aug 31, 2026
3 checks passed
@Xyloth
Xyloth deleted the hardening/dependency-ci branch August 31, 2026 14:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant