Martin Vogel a3336bf346 chore(security): resolve flagged Scorecard + Dependabot alerts ...

- graph-ui: bump vite ^6.4.2 -> ^6.4.3 and add overrides pinning the transitive
  form-data >=4.0.6 and @babel/core >=7.29.6 (all dev-scope build/test deps, not
  shipped in the binary). Clears the 4 open Dependabot alerts and Scorecard's
  VulnerabilitiesID. `npm audit` now reports 0 vulnerabilities.
- codeql.yml: move `security-events: write` from the workflow top level to the
  `analyze` job (top level is now `contents: read`), resolving Scorecard's
  TokenPermissionsID least-privilege finding. CodeQL still uploads results from the
  job-scoped token.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-06-24 00:34:05 +02:00

..

@/components/ui

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

src

fix(ui): render graph labels without remote font fetches (#496)

2026-06-22 22:04:54 +02:00

components.json

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

index.html

fix(ui): render graph labels without remote font fetches (#496)

2026-06-22 22:04:54 +02:00

package-lock.json

chore(security): resolve flagged Scorecard + Dependabot alerts

2026-06-24 00:34:05 +02:00

package.json

chore(security): resolve flagged Scorecard + Dependabot alerts

2026-06-24 00:34:05 +02:00

tsconfig.json

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

tsconfig.tsbuildinfo

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

vite.config.ts

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00