From 9e17b5e93371b5bb72ed942d860a6f798d84430f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 06:35:16 +0000 Subject: [PATCH 1/2] chore(deps-dev): bump unist-util-visit Bumps the development-dependencies group with 1 update: [unist-util-visit](https://github.com/syntax-tree/unist-util-visit). Updates `unist-util-visit` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/syntax-tree/unist-util-visit/releases) - [Commits](https://github.com/syntax-tree/unist-util-visit/compare/5.1.0...5.2.0) --- updated-dependencies: - dependency-name: unist-util-visit dependency-version: 5.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] --- package-lock.json | 16 ++++++++-------- package.json | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index 297c8c7101..3cc06d129e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -51,7 +51,7 @@ "typescript-7": "npm:typescript@7.0.2", "typescript-eslint": "8.72.0", "unified": "11.0.5", - "unist-util-visit": "5.1.0", + "unist-util-visit": "5.2.0", "vite": "8.3.5", "vitest": "5.0.5", "worldbank-mcp": "1.0.1" @@ -13013,15 +13013,15 @@ } }, "node_modules/unist-util-visit": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.1.0.tgz", - "integrity": "sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg==", + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.2.0.tgz", + "integrity": "sha512-fpsYs/VVoZxfGY9/j3FQpZmN8wdLJaV1Pt38AaJNZu9uKIHcFU3halCdBveEq1HGKO1OEfJY65w1zvoFV1b3qQ==", "dev": true, "license": "MIT", "dependencies": { "@types/unist": "^3.0.0", "unist-util-is": "^6.0.0", - "unist-util-visit-parents": "^6.0.0" + "unist-util-visit-parents": "^6.1.0" }, "funding": { "type": "opencollective", @@ -13029,9 +13029,9 @@ } }, "node_modules/unist-util-visit-parents": { - "version": "6.0.2", - "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-6.0.2.tgz", - "integrity": "sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ==", + "version": "6.1.0", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-6.1.0.tgz", + "integrity": "sha512-vKXxz6O38sKDj1mtx/k2cWvkkFBuYGx6uGrlzBkVeWCRF/F8sdI0j3Wbkz/5rVNRRuVc8UrgRdbCxNhmYXgP3w==", "dev": true, "license": "MIT", "dependencies": { diff --git a/package.json b/package.json index a9574be3dd..cc7be55bce 100644 --- a/package.json +++ b/package.json @@ -216,7 +216,7 @@ "typescript-7": "npm:typescript@7.0.2", "typescript-eslint": "8.72.0", "unified": "11.0.5", - "unist-util-visit": "5.1.0", + "unist-util-visit": "5.2.0", "vite": "8.3.5", "vitest": "5.0.5", "worldbank-mcp": "1.0.1" From 94a098bcaffa8b9b8e55ef64d3c63f53894148d4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?James=20Pether=20S=C3=B6rling?= Date: Sun, 25 Oct 2026 08:34:44 +0100 Subject: [PATCH 2/2] Add cia.sourceforge.io to allowed endpoints MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Added 'cia.sourceforge.io' to allowed endpoints in multiple sections of the quality-checks workflow. Signed-off-by: James Pether Sörling --- .github/workflows/quality-checks.yml | 49 ++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) diff --git a/.github/workflows/quality-checks.yml b/.github/workflows/quality-checks.yml index a282d8b716..908fa080ed 100644 --- a/.github/workflows/quality-checks.yml +++ b/.github/workflows/quality-checks.yml @@ -19,11 +19,24 @@ jobs: egress-policy: block allowed-endpoints: > api.github.com:443 + cia.sourceforge.io:443 codeload.github.com:443 + data.riksdagen.se:443 + data.worldbank.org:443 github.com:443 nodejs.org:443 objects.githubusercontent.com:443 + raw.githubusercontent.com:443 registry.npmjs.org:443 + riksdagsmonitor.com:443 + www.esv.se:443 + www.hack23.com:443 + www.linkedin.com:443 + www.riksdagen.se:443 + www.val.se:443 + *.blob.core.windows.net:443 + download.cypress.io:443 + release-assets.githubusercontent.com:443 - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -74,11 +87,24 @@ jobs: egress-policy: block allowed-endpoints: > api.github.com:443 + cia.sourceforge.io:443 codeload.github.com:443 + data.riksdagen.se:443 + data.worldbank.org:443 github.com:443 nodejs.org:443 objects.githubusercontent.com:443 + raw.githubusercontent.com:443 registry.npmjs.org:443 + riksdagsmonitor.com:443 + www.esv.se:443 + www.hack23.com:443 + www.linkedin.com:443 + www.riksdagen.se:443 + www.val.se:443 + *.blob.core.windows.net:443 + download.cypress.io:443 + release-assets.githubusercontent.com:443 - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -171,6 +197,9 @@ jobs: www.linkedin.com:443 www.riksdagen.se:443 www.val.se:443 + *.blob.core.windows.net:443 + download.cypress.io:443 + release-assets.githubusercontent.com:443 - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -295,6 +324,26 @@ jobs: uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block + allowed-endpoints: > + api.github.com:443 + cia.sourceforge.io:443 + codeload.github.com:443 + data.riksdagen.se:443 + data.worldbank.org:443 + github.com:443 + nodejs.org:443 + objects.githubusercontent.com:443 + raw.githubusercontent.com:443 + registry.npmjs.org:443 + riksdagsmonitor.com:443 + www.esv.se:443 + www.hack23.com:443 + www.linkedin.com:443 + www.riksdagen.se:443 + www.val.se:443 + *.blob.core.windows.net:443 + download.cypress.io:443 + release-assets.githubusercontent.com:443 - name: Quality Check Summary run: |