Micron Document
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| SparkN0de-git | SparkN0de |
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Node / ReticulumProjects / MeshChatX.git / commits / 75545fc


Commit 75545fccc662a65633dd03f6add4173e974d57e2

󰉖 Browse tree at this commit

Parents : d26708e
Author : Ivan <ivan@quad4.io>
Signature : Invalid signer <e46112d44649266d71fe2193e00a4710>, author is <ivan@quad4.io>
Date : 2026-07-04T17:16:27-05:00

chore(github-actions): update pip version in security workflow and remove obsolete CVE comment

Changes

1 files changed, 2 insertions(+), 4 deletions(-)

M .github/workflows/security.yml +2 -4

Diff

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 4e0bdf2d..5ce7690a 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -5,8 +5,6 @@
# actions/download-artifact@v5.0.0 634f93cb2916e3fdff6788551b99b062d0335ce0
# github/codeql-action/init@v4.31.6 95e58e9a2cdfd71adc6e0353d5c52f41a045d225
# github/codeql-action/analyze@v4.31.6 95e58e9a2cdfd71adc6e0353d5c52f41a045d225
-#
-# FIXME: CVE-2026-3219 affects pip through 26.0.1; ignored until next pip release.
name: Security
@@ -61,8 +59,8 @@ jobs:
- name: pip-audit
run: |
- uv run pip install --upgrade "pip>=26.0" pip-audit
- uv run pip-audit --ignore-vuln CVE-2026-3219
+ uv run pip install --upgrade "pip>=26.1" pip-audit
+ uv run pip-audit
- name: Apt update (for Trivy .deb)
run: sh scripts/ci/exec-priv.sh apt-get update -qq


──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────