Skip to content

fix(deps): upgrade napi to patched 3.12.4 - #34

Merged
mgeier merged 1 commit into
mainfrom
security/aikido-napi-upgrade
Sep 25, 2026
Merged

mgeier merged 1 commit into
mainfrom
security/aikido-napi-upgrade

Conversation

@iCorv

@iCorv iCorv commented Sep 23, 2026

Copy link
Copy Markdown
Contributor

Fix six high-severity Aikido findings by raising the minimum napi version to 3.12.4 and refreshing Cargo.lock, including the required napi-build and napi-sys updates.

Aikido findings: 667197640, 667197642, 688356415, 688356419, 688356423, 694871948. Existing PRs #30 and #31 cover separate workflow and model-file findings; no existing napi fix PR or matching Linear ticket was found.

Validation: cargo test --locked (builds successfully; no Rust unit tests), cargo clippy --locked --all-targets -- -D warnings, cargo build --locked, and git diff --check passed. Native binding integration tests remain covered by CI.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 23, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-23T14:14:11.731022Z 8fd98e0 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@mgeier
mgeier merged commit f01b4ea into main Sep 25, 2026
13 checks passed
@mgeier
mgeier deleted the security/aikido-napi-upgrade branch September 25, 2026 15:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants