bambuddy/.github/workflows
maziggy 8600b46d6c ci: upgrade setuptools in pip-audit jobs to clear PYSEC-2026-3447
The GitHub runner's Python toolcache ships setuptools 79.0.1, which
pip-audit flags for PYSEC-2026-3447 (fixed in 83.0.0), failing the
blocking Backend Security job. A fix version exists, so upgrade
setuptools in the install step rather than --ignore-vuln. Applied to
both ci.yml (blocking) and security.yml (scheduled scan).
2026-07-17 08:59:06 +02:00
..
auto-label-area.yml ci: bump actions to Node-24-compatible majors 2026-05-26 12:45:33 +02:00
ci.yml ci: upgrade setuptools in pip-audit jobs to clear PYSEC-2026-3447 2026-07-17 08:59:06 +02:00
cleanup-ghcr.yml Updated .github/workflows/cleanup-ghcr.yml 2026-06-21 10:06:16 +02:00
codeql.yml ci: bump actions to Node-24-compatible majors 2026-05-26 12:45:33 +02:00
issue-closed.yml ci: bump actions to Node-24-compatible majors 2026-05-26 12:45:33 +02:00
repo-stats.yml Housekeeping 2026-07-07 11:11:15 +02:00
security.yml ci: upgrade setuptools in pip-audit jobs to clear PYSEC-2026-3447 2026-07-17 08:59:06 +02:00
stale.yml ci: bump actions to Node-24-compatible majors 2026-05-26 12:45:33 +02:00
windows-installer.yml feat(windows-installer): native .exe installer pipeline 2026-06-10 14:11:02 +02:00