Unreleased Commits - UnitVectorY-Labs

Default Branch: main
Latest Release: v5.0.1-uvy.1
Release Date: October 16, 2026
Unreleased Commits: 8
Days Behind: 16
Days Since Release: 17

Unreleased Commits

1e76702636370f18f03803280d93c8a24cc6cce3 JaredHatfield Nov 1, 2026 14:53 merge
Merge pull request #6 from UnitVectorY-Labs/dependabot/npm_and_yarn/xmldom/xmldom-0.8.15 build: bump @xmldom/xmldom from 0.8.10 to 0.8.15
233b4370c654e550f42ea2240907c14cf4d0d760 JaredHatfield Nov 1, 2026 14:51 merge
Merge pull request #5 from UnitVectorY-Labs/dependabot/npm_and_yarn/multi-c5ebbb4833 build: bump js-yaml
071edd702294bad2e28b6e84a04dd5ab88393e5b JaredHatfield Nov 1, 2026 14:47 merge
Merge pull request #4 from UnitVectorY-Labs/dependabot/npm_and_yarn/multi-b04dc22ff7 build: bump brace-expansion
7ff864cb52620ca11fe8b0f11291cac885d096e8 dependabot[bot] Oct 24, 2026 22:42
build: bump @xmldom/xmldom from 0.8.10 to 0.8.15 Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.10 to 0.8.15. - [Release notes](https://github.com/xmldom/xmldom/releases) - [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md) - [Commits](https://github.com/xmldom/xmldom/compare/0.8.10...0.8.15) --- updated-dependencies: - dependency-name: "@xmldom/xmldom" dependency-version: 0.8.15 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
51c852967be86f569fe191df608f1c2a452fa5e2 dependabot[bot] Oct 24, 2026 22:41
build: bump js-yaml Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.3.2 and updates ancestor dependency . These dependencies need to be updated together. Updates `js-yaml` from 4.1.0 to 4.3.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.3.2) Updates `js-yaml` from 3.14.1 to 3.15.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.3.2) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.3.2 dependency-type: direct:development - dependency-name: js-yaml dependency-version: 3.15.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
7761f34fc4a104319097e9151cd40b943e3e1832 dependabot[bot] Oct 24, 2026 22:41
build: bump brace-expansion Bumps and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together. Updates `brace-expansion` from 1.1.11 to 1.1.21 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21) Updates `brace-expansion` from 2.0.1 to 2.1.7 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.21 dependency-type: indirect - dependency-name: brace-expansion dependency-version: 2.1.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
8064871f74658604a50a3c68a199f121c1640bfc JaredHatfield Oct 24, 2026 15:31
Add weekly OSV-Scanner vulnerability scans (#3) * Add weekly OSV-Scanner vulnerability scans * security: refine OSV scanner event filters * Split OSV scanner workflows by event
6a158084d500b4c8ff872b9486a9a33c572f8b6b JaredHatfield Oct 16, 2026 07:59 merge
Merge pull request #1 from UnitVectorY-Labs/fix/protect-referenced-manifests Preserve referenced GHCR manifests during untagged cleanup