Skip to content

Promote dev to main: security and CI hardening - #160

Merged
Iron-Mark merged 21 commits into
mainfrom
dev
Sep 5, 2026
Merged

Promote dev to main: security and CI hardening#160
Iron-Mark merged 21 commits into
mainfrom
dev

Conversation

@Iron-Mark

@Iron-Mark Iron-Mark commented Sep 5, 2026

Copy link
Copy Markdown
Owner

Summary

  • promote the verified development history to production
  • include the merged fast-uri and qs security fixes
  • restore the full security regression suite to the required PR job
  • repair stale and flaky E2E assertions
  • reduce duplicate Actions runs with narrower triggers and concurrency cancellation

Verification

Iron-Mark and others added 21 commits August 19, 2026 05:49
@Iron-Mark
chore: sync dev with main (1074c29) (#130)
ce9e44a 
chore: sync dev with main (1074c29)
@Iron-Mark
ci: automate safe Dependabot patch merges (#131)
b080217 
* ci: automate safe Dependabot patch merges

* ci: retrigger checks after target correction
@Iron-Mark
ci: add weekly repository health audit (#132)
2e8512f
@Iron-Mark
fix: harden weekly health audit reporting (#136)
b84b9f1
@Iron-Mark
Promote repository maintenance automation to main (#133) (#134)
059b122 
* ci: automate safe Dependabot patch merges (#131)

* ci: automate safe Dependabot patch merges

* ci: retrigger checks after target correction

* ci: add weekly repository health audit (#132)
chore: preserve main ancestry before audit promotion
8ed4f98
@Iron-Mark
Merge pull request #138 from Iron-Mark/agent/preserve-main-ancestry-f…
cd92ee2 
…or-audit

Preserve main ancestry before audit promotion
@github-actions
Merge origin/main into chore/sync-dev-with-main
6865960
@Iron-Mark
Merge pull request #139 from Iron-Mark/chore/sync-dev-with-main
5b62966 
chore: sync dev with main (9db6230)
@dependabot
chore(deps-dev): bump @tailwindcss/postcss from 4.3.1 to 4.3.3 (#140)
87c21e5 
Bumps [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss)

---
updated-dependencies:
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump @ai-sdk/openai from 4.0.40 to 4.0.45 (#142)
440fae1 
Bumps [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) from 4.0.40 to 4.0.45.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.45/packages/openai)

---
updated-dependencies:
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump next from 16.3.1 to 16.3.3 in the next-runtime group (
ed02c8f 
#148)

Bumps the next-runtime group with 1 update: [next](https://github.com/vercel/next.js).


Updates `next` from 16.3.1 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.1...v16.3.3)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: next-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@Iron-Mark
chore: tighten dependency and artifact hygiene (#151)
3eba54a 
Co-authored-by: Iron-Mark <Iron-Mark@users.noreply.github.com>
@github-actions
Merge origin/main into chore/sync-dev-with-main
7e797a0
@Iron-Mark
Merge pull request #153 from Iron-Mark/chore/sync-dev-with-main
ca74657 
chore: sync dev with main (4675ca5)
@dependabot
chore(deps): bump the npm-patches group with 9 updates (#154)
bd51e4f 
Bumps the npm-patches group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/gateway](https://github.com/vercel/ai/tree/HEAD/packages/gateway) | `4.0.28` | `4.0.68` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.45` | `4.0.51` |
| [@cursor/sdk](https://github.com/cursor/cursor) | `1.0.22` | `1.0.30` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.3` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.37` | `7.0.84` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.42.0` | `12.42.2` |
| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
| [@openai/codex-sdk](https://github.com/openai/codex/tree/HEAD/sdk/typescript) | `0.146.0` | `0.146.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.5` |


Updates `@ai-sdk/gateway` from 4.0.28 to 4.0.68
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/gateway/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/gateway@4.0.68/packages/gateway)

Updates `@ai-sdk/openai` from 4.0.45 to 4.0.51
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.51/packages/openai)

Updates `@cursor/sdk` from 1.0.22 to 1.0.30
- [Commits](https://github.com/cursor/cursor/commits)

Updates `@upstash/redis` from 1.38.0 to 1.38.3
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.3)

Updates `ai` from 7.0.37 to 7.0.84
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.84/packages/ai)

Updates `framer-motion` from 12.42.0 to 12.42.2
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.42.0...v12.42.2)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `@openai/codex-sdk` from 0.146.0 to 0.146.1
- [Commits](https://github.com/openai/codex/commits/rust-v0.146.1/sdk/typescript)

Updates `@types/react-dom` from 19.2.3 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@ai-sdk/gateway"
  dependency-version: 4.0.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: "@cursor/sdk"
  dependency-version: 1.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: ai
  dependency-version: 7.0.84
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: framer-motion
  dependency-version: 12.42.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: "@openai/codex-sdk"
  dependency-version: 0.146.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-patches
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@Iron-Mark
ci: auto-merge verified patch groups (#155)
251ef09 
Co-authored-by: Iron-Mark <Iron-Mark@users.noreply.github.com>
@github-actions
Merge origin/main into chore/sync-dev-with-main
e3195f9
@github-actions
Merge origin/main into chore/sync-dev-with-main
9b2ded7
@Iron-Mark
Merge pull request #158 from Iron-Mark/chore/sync-dev-with-main
4d92b1a 
chore: sync dev with main (664a7bb)
@Iron-Mark
fix(ci): restore regression coverage and reduce duplicate runs (#159)
17a481f 
Co-authored-by: Iron-Mark <Iron-Mark@users.noreply.github.com>
@vercel

vercel Bot commented Sep 5, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
hireproof Ready Ready Preview Sep 5, 2026 11:35pm UTC

Request Review

@Iron-Mark
Iron-Mark merged commit 39b578f into main Sep 5, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Iron-Mark