Harden TxLINE worker and clear dependency advisories - #37
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
@codex review Please review the exact head |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: dacee40fdb
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex review Please re-review exact head |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 2275a668c0
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex review Please review exact head |
|
Codex Review: Didn't find any major issues. More of your lovely PRs please. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
1 participant
Summary
Root cause
The scheduled OSV job found newly disclosed vulnerable direct and transitive versions. Separately, a long-lived TxLINE stream could remain pending before
onOpen, or remain open after heartbeats stopped, without forcing a new connection. The recurring delay helper also retained abort listeners after normal completion.Verification
CI=true pnpm install --frozen-lockfilepnpm check— 33 files, 198/198 tests, formatting, privacy gate, typecheck and buildpnpm audit --json— 0 findings across 275 dependenciespnpm audit --prod --json— 0 findings across 79 dependenciesNo governor policy, approved evidence, public claim, Decision Tape, permit contract or submission narrative changed.