Address vulnerability and move taibai from CI to justfile. #47

Merged

marvin8 merged 0 commits from refs/pull/47/head into main

2026-06-21 07:46:01 +00:00

marvin8 commented

2026-06-21 07:35:50 +00:00

(Migrated from codeberg.org)

Summary

Fix GHSA-4xgf-cpjx-pc3j: add [tool.uv] constraint-dependencies pinning pydantic-settings>=2.14.2 and idna>=3.15; bump several direct and dev deps (longwei, tqdm, bump-my-version, complexipy, prek, ruff, ty, uv)
Update WuMing CI pipeline from the deprecated .woodpecker/agent-reviews.yaml schema to the current .woodpecker/ai-review.yml format
Remove TaiBai release-thread posting from CI (brittle credential/network dependency); add just publish-taibai recipe for local publishing

## Summary - Fix GHSA-4xgf-cpjx-pc3j: add `[tool.uv] constraint-dependencies` pinning `pydantic-settings>=2.14.2` and `idna>=3.15`; bump several direct and dev deps (longwei, tqdm, bump-my-version, complexipy, prek, ruff, ty, uv) - Update WuMing CI pipeline from the deprecated `.woodpecker/agent-reviews.yaml` schema to the current `.woodpecker/ai-review.yml` format - Remove TaiBai release-thread posting from CI (brittle credential/network dependency); add `just publish-taibai` recipe for local publishing