• Joined on 2026-02-23
maximus pushed to state-sync-128-129-130 at maximus/simpl-liste 2026-10-05 23:35:20 +00:00
aa41642a87 state: sync after #128, #129 (PR #131), #126 and #130
maximus created pull request maximus/simpl-liste#132 2026-10-05 23:35:19 +00:00
state: sync after #128, #129 (PR #131), #126 and #130
maximus commented on pull request maximus/simpl-liste#131 2026-10-05 23:34:49 +00:00
fix(security): add http-cache-semantics and postcss-selector-parser floors

Merge fast-forward sur cb53a43. Le commit cb53a43 (portee de http-cache-semantics limitee au majeur 4, suggestion de la revue) a ete ajoute apres l APPROVE et n a pas ete relu. Valide avant…

maximus deleted branch issue-128-129-http-cache-semantics-postcss-selector-parser-floors from maximus/simpl-liste 2026-10-05 23:34:43 +00:00
maximus merged pull request maximus/simpl-liste#131 2026-10-05 23:34:42 +00:00
fix(security): add http-cache-semantics and postcss-selector-parser floors
maximus closed issue maximus/simpl-liste#128 2026-10-05 23:34:42 +00:00
[security] deps: vulnerability in http-cache-semantics (high)
maximus closed issue maximus/simpl-liste#129 2026-10-05 23:34:42 +00:00
[security] deps: vulnerability in postcss-selector-parser (low)
maximus pushed to master at maximus/simpl-liste 2026-10-05 23:34:42 +00:00
cb53a43422 fix(security): scope http-cache-semantics floor to major 4
62efdba22e fix(security): add http-cache-semantics and postcss-selector-parser floors
Compare 2 commits »
cb53a43422 fix(security): scope http-cache-semantics floor to major 4
maximus closed issue maximus/Simpl-Resultat#234 2026-10-05 23:33:21 +00:00
CI: connectivité serveur-de-cache du runner (reserveCache timeout — cause #2)
maximus commented on issue maximus/Simpl-Resultat#234 2026-10-05 23:33:20 +00:00
CI: connectivité serveur-de-cache du runner (reserveCache timeout — cause #2)

Point 4 : fait, et #234 est close (2026-10-05). Relevé du dossier de cache du runner, à 23:32 UTC :

999M  /home/ubuntu/.cache/actcache
24K   /home/ubuntu/.cache/actcache/bolt.db
999M …
maximus commented on pull request maximus/simpl-liste#131 2026-10-05 23:31:55 +00:00
fix(security): add http-cache-semantics and postcss-selector-parser floors

Revue adversariale — verdict : APPROVE

Résumé : deux planchers d'override ciblés, lockfile limité à 2 strophes, gardes de smoke qui rougissent bien sur la mutation exacte. Rien de…

maximus commented on issue maximus/simpl-liste#126 2026-10-05 23:27:58 +00:00
[security] deps: decode-uri-component 0.5.0 publiee, re-tester l'acceptation de #120 (moderate)

Re-test du 2026-10-05 : acceptation de #120 maintenue

Etape 1 de la resolution suggeree, critere d arret atteint :

$ npm view decode-uri-component@0.5.0 type exports
type: "module",…
maximus closed issue maximus/simpl-liste#126 2026-10-05 23:27:58 +00:00
[security] deps: decode-uri-component 0.5.0 publiee, re-tester l'acceptation de #120 (moderate)
maximus commented on issue maximus/simpl-liste#123 2026-10-05 23:27:58 +00:00
[security] deps: node-forge RSA PKCS#1 v1.5 (high) -- bloque upstream, suivi

Re-verification du 2026-10-05 : inchange. node-forge tete publiee 1.4.0 (borne <=1.4.0) ; @expo/code-signing-certificates@0.0.7 declare node-forge ^1.4.0 ; @expo/cli@54.0.27 (dernier…

maximus created pull request maximus/simpl-liste#131 2026-10-05 23:27:47 +00:00
fix(security): add http-cache-semantics and postcss-selector-parser floors
62efdba22e fix(security): add http-cache-semantics and postcss-selector-parser floors
maximus pushed to main at maximus/Simpl-Resultat 2026-10-05 23:25:35 +00:00
8f964e096b state: sync after the suites-licence stack merge (#373, #370, #367, PRs #386-#388)
maximus commented on issue maximus/Simpl-Resultat#234 2026-10-05 23:24:06 +00:00
CI: connectivité serveur-de-cache du runner (reserveCache timeout — cause #2)

Point 3 de la liste post-merge : fait. Premier run planifié de check-rust, lundi 2026-10-05 à 06:30 UTC : run 488 sur main, vert en 3 min 27 s.

Cache Size: ~999 MB (1047376269…