From ac6bc6339b472d3f481d91ca9024c1cd7014a9b8 Mon Sep 17 00:00:00 2001 From: Adib Hanna Date: Wed, 9 Sep 2026 15:37:05 -0500 Subject: [PATCH] chore: pin ZenNotes 431907df (smol-toml / hono audit fix) The pinned core's production audit went red today on smol-toml GHSA-7w5x-hrqm-74c2 (high), which CI checks against .zennotes-source. Upstream fixed it lockfile-only in ZenNotes/zennotes#760 (smol-toml 1.8.0, hono 4.13.7); this follows that squash commit. Moving past a3e638fc also adopts the 2.47.0 core (Cloud conflict and draft fixes, Excalidraw switching fix, wikilink-to-file fix). The bridge-contract additions since the old pin are optional, so the mobile bridge is unchanged, and vault.ts has nothing to mirror. Lands on main rather than release/1.9.8, which is already archived as build 19. --- .zennotes-commit | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.zennotes-commit b/.zennotes-commit index 92ac9f2..261c8c9 100644 --- a/.zennotes-commit +++ b/.zennotes-commit @@ -1 +1 @@ -a3e638fc93852e602501d6cbbed6e0c0a60d8cd4 +431907dfb63a59192ff414839673446564ee737e