Skip to content

Feature/hardening backlog - #49

Merged
nnlgsakib merged 3 commits into
masterfrom
feature/hardening-backlog
Aug 22, 2026
Merged

Feature/hardening backlog#49
nnlgsakib merged 3 commits into
masterfrom
feature/hardening-backlog

Conversation

@nnlgsakib

Copy link
Copy Markdown
Collaborator

No description provided.

nnlgsakib and others added 3 commits August 22, 2026 20:48
t.TempDir() on macOS runners produces paths longer than sun_path's
104 bytes, so bind fails with EINVAL (CI: Test macos-latest). Fall
back to a short /tmp dir when the socket path approaches the limit.

Co-Authored-By: Claude <noreply@anthropic.com>
Toolchain go 1.25.10 -> 1.25.13 (crypto/tls, crypto/x509, asn1,
html/template, net/http, net/url, net/textproto fixes), grpc
v1.81.1 -> v1.82.1, x/text v0.38.0 -> v0.39.0, pion/dtls v3.1.2 ->
v3.1.4, webtransport-go v0.10.0 -> v0.11.1.

govulncheck now reports exactly one finding: GO-2024-3218
(Kademlia DHT censorship) which has no upstream fix - documented as
accepted architectural risk in the CI job comment; job stays
reporting-only until upstream ships one.

Full test suite green after bumps.

Co-Authored-By: Claude <noreply@anthropic.com>
npm audit fix clears the nanoid and postcss high-severity findings
and the SvelteKit/cookie moderate chain. 4 low-severity findings
remain behind breaking adapter major bumps (--force territory) -
accepted for now.

Co-Authored-By: Claude <noreply@anthropic.com>
@nnlgsakib
nnlgsakib merged commit ec2aa89 into master Aug 22, 2026
10 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant