fix(security): resolve Dependabot #5 (lru unsound) + Code Scanning #7 (actions expr-injection)#56

Merged

hyperpolymath merged 3 commits into

mainfrom

claude/fix-security-vulnerability-RMcwt

May 12, 2026

Commits on May 11, 2026

fix(deps): bump ratatui 0.29 -> 0.30 to drop vulnerable lru transitive
claude
committed
fix(actions): close expression-injection sink in instant-sync workflow
claude
committed

Commits on May 12, 2026

ci(hypatia): fail-soft on scanner-infra errors
claude
committed