Merge pull request #86 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.3
Bump astral-sh/setup-uv from 10.3.1 to 10.3.3
Merge pull request #87 from UnitVectorY-Labs/dependabot/github_actions/UnitVectorY-Labs/chromadb-repo-indexer-1.2.1
Bump UnitVectorY-Labs/chromadb-repo-indexer from 1.2.0 to 1.2.1
Bump UnitVectorY-Labs/chromadb-repo-indexer from 1.2.0 to 1.2.1
Bumps [UnitVectorY-Labs/chromadb-repo-indexer](https://github.com/unitvectory-labs/chromadb-repo-indexer) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/unitvectory-labs/chromadb-repo-indexer/releases)
- [Commits](https://github.com/unitvectory-labs/chromadb-repo-indexer/compare/69bfd4086b9251106a5c8b036068e02f2d0731aa...8ee570e0b30e5252afadb146977b411b8acd3e34)
---
updated-dependencies:
- dependency-name: UnitVectorY-Labs/chromadb-repo-indexer
dependency-version: 1.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Bump astral-sh/setup-uv from 10.3.1 to 10.3.3
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.1 to 10.3.3.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/18d369b23da25a81e9458561248e1aafff6a70fa...68559e99cc807c1eb7e9238fd43a15bba460eec2)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Add weekly OSV-Scanner vulnerability scans (#82)
* Add weekly OSV-Scanner vulnerability scans
* Fix OSV merge-group workflow routing
* Align OSV-Scanner workflows with SARIF policy
---------
Co-authored-by: OpenCode <opencode@users.noreply.github.com>
Merge pull request #83 from UnitVectorY-Labs/dependabot/github_actions/codeql-52fc152648
Bump the codeql group with 3 updates
Merge pull request #84 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.1
Bump astral-sh/setup-uv from 10.3.0 to 10.3.1
Bump astral-sh/setup-uv from 10.3.0 to 10.3.1
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.0 to 10.3.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...18d369b23da25a81e9458561248e1aafff6a70fa)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Bump the codeql group with 3 updates
Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).
Updates `github/codeql-action/init` from 4.38.3 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql
- dependency-name: github/codeql-action/analyze
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: codeql
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #80 from UnitVectorY-Labs/dependabot/github_actions/codeql-307b189a33
Bump the codeql group with 3 updates
Merge pull request #81 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.0
Bump astral-sh/setup-uv from 10.2.0 to 10.3.0
Bump astral-sh/setup-uv from 10.2.0 to 10.3.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/c18668ad3cf93ea998bef934396af7bb5c839dc7...1c37ad07a6a961277cf70c0d37d6f313000f5884)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Bump the codeql group with 3 updates
Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).
Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #78 from UnitVectorY-Labs/dependabot/github_actions/actions/upload-artifact-7.0.2
Bump actions/upload-artifact from 7.0.1 to 7.0.2
Bump actions/upload-artifact from 7.0.1 to 7.0.2
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #77 from UnitVectorY-Labs/dependabot/github_actions/codeql-9d88a12d2b
Bump the codeql group with 3 updates
Bump the codeql group with 3 updates
Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).
Updates `github/codeql-action/init` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #75 from UnitVectorY-Labs/dependabot/github_actions/codeql-c83b7ed659
Bump the codeql group with 2 updates
Bump the codeql group with 2 updates
Bumps the codeql group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).
Updates `github/codeql-action/init` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)
Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: codeql
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #74 from UnitVectorY-Labs/dependabot-codeql-group
Add codeql groups to dependabot github-actions
Add codeql groups to dependabot github-actions
Merge pull request #71 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.2.0
Bump astral-sh/setup-uv from 10.1.0 to 10.2.0
Merge pull request #70 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.1
Bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1
Bump astral-sh/setup-uv from 10.1.0 to 10.2.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.1.0 to 10.2.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.38.0 to 4.38.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #69 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.1.0
Bump astral-sh/setup-uv from 10.0.1 to 10.1.0
Bump astral-sh/setup-uv from 10.0.1 to 10.1.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.0.1 to 10.1.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/20cfd1bf945f4377ade1205e4dbc17946fc9a30d...bec219d24cd3e171d82865faccec33120bb574f4)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #68 from UnitVectorY-Labs/chore/codeql-4.38.0
Bump CodeQL version to 4.38.0
Bump CodeQL version to 4.38.0
Merge pull request #65 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.0
Bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
Bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.9 to 4.38.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>