CodeQL

Workflow runs for CodeQL

• Bump github/codeql-action/analyze from 4.38.3 to 4.39.3

  failed:
  CodeQL#130:Pull request#60openedbydependabot[bot]Bot
  dependabot/github_actions/github/codeql-action/analyze-4.39.3

  Nov 7, 202629s
  More actions for workflow run 130

• Bump github/codeql-action/init from 4.38.3 to 4.39.3

  failed:
  CodeQL#129:Pull request#59openedbydependabot[bot]Bot
  dependabot/github_actions/github/codeql-action/init-4.39.3

  Nov 7, 202630s
  More actions for workflow run 129

• CodeQL

  completed successfully:
  CodeQL#128:Scheduled
  main

  Nov 2, 20261m 4s
  More actions for workflow run 128

• Bump body-parser from 2.3.0 to 2.4.0

  completed successfully:
  CodeQL#127:Pull request#58openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/body-parser-2.4.0

  Oct 31, 20261m 47s
  More actions for workflow run 127

• CodeQL

  completed successfully:
  CodeQL#126:Scheduled
  main

  Oct 26, 20261m 15s
  More actions for workflow run 126

• Bump github/codeql-action/analyze from 4.38.3 to 4.39.1

  failed:
  CodeQL#125:Pull request#57openedbydependabot[bot]Bot
  dependabot/github_actions/github/codeql-action/analyze-4.39.1

  Oct 24, 202626s
  More actions for workflow run 125

• Bump github/codeql-action/init from 4.38.3 to 4.39.1

  failed:
  CodeQL#124:Pull request#56openedbydependabot[bot]Bot
  dependabot/github_actions/github/codeql-action/init-4.39.1

  Oct 24, 202632s
  More actions for workflow run 124

• Bump hono from 4.13.8 to 4.13.13

  completed successfully:
  CodeQL#123:Pull request#55openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/hono-4.13.13

  Oct 21, 20261m 8s
  More actions for workflow run 123

• Bump @modelcontextprotocol/express from 2.0.0 to 2.0.2

  completed successfully:
  CodeQL#122:Pull request#54openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/modelcontextprotocol/express-2.0.2

  Oct 20, 202658s
  More actions for workflow run 122

• CodeQL

  completed successfully:
  CodeQL#121:Scheduled
  main

  Oct 19, 20261m 18s
  More actions for workflow run 121

• Bump actions/checkout from 4 to 7

  completed successfully:
  CodeQL#120:Pull request#53openedbydependabot[bot]Bot
  dependabot/github_actions/actions/checkout-7

  Oct 17, 20261m 20s
  More actions for workflow run 120

• Bump marked from 18.1.0 to 18.1.1

  completed successfully:
  CodeQL#119:Pull request#52openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/marked-18.1.1

  Oct 17, 202656s
  More actions for workflow run 119

• Bump express from 5.2.1 to 5.3.0

  completed successfully:
  CodeQL#118:Pull request#51openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/express-5.3.0

  Oct 17, 20261m 16s
  More actions for workflow run 118

• Bump zod from 4.6.5 to 4.6.7

  completed successfully:
  CodeQL#117:Pull request#50openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/zod-4.6.7

  Oct 17, 20261m 8s
  More actions for workflow run 117

• Bump sanitize-html and @types/sanitize-html

  completed successfully:
  CodeQL#116:Pull request#49openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/multi-c403de7b47

  Oct 17, 20261m 8s
  More actions for workflow run 116

• Bump dotenv from 18.0.6 to 18.0.7

  completed successfully:
  CodeQL#115:Pull request#48openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/dotenv-18.0.7

  Oct 17, 20261m 10s
  More actions for workflow run 115

• Simplify agent contract: cite_as-only citations, no editor version field (#44, A)

  completed successfully:
  CodeQL#114:Pull request#45openedbyhkrlogic
  simplify/agent-contract

  Oct 17, 20261m 12s
  More actions for workflow run 114

• Merge pull request #43 from hkrlogic/polish/agent-errors-and-instruct…

  completed successfully:
  CodeQL#113:Commit61ed94fpushedbyhkrlogic
  main

  Oct 14, 20261m 16s
  More actions for workflow run 113

• Polish agent answers: one-round write errors, no-match not an error, shorter instructions, UTF-8

  completed successfully:
  CodeQL#112:Pull request#43openedbyhkrlogic
  polish/agent-errors-and-instructions

  Oct 14, 20261m 17s
  More actions for workflow run 112

• Merge pull request #42 from hkrlogic/fix/mcp-write-validation

  completed successfully:
  CodeQL#111:Commitf7d0c2dpushedbyhkrlogic
  main

  Oct 14, 20261m 18s
  More actions for workflow run 111

• Validate MCP item writes strictly (labels, non-string values, versions, limits, all issues)

  completed successfully:
  CodeQL#110:Pull request#42openedbyhkrlogic
  fix/mcp-write-validation

  Oct 14, 202657s
  More actions for workflow run 110

• Merge pull request #41 from hkrlogic/ci/compose-smoke

  completed successfully:
  CodeQL#109:Commitd5bab8dpushedbyhkrlogic
  main

  Oct 14, 20261m 19s
  More actions for workflow run 109

• ci: add docker compose smoke test

  completed successfully:
  CodeQL#108:Pull request#41openedbyhkrlogic
  ci/compose-smoke

  Oct 14, 20261m 15s
  More actions for workflow run 108

• Merge pull request #40 from hkrlogic/fix/deep-test-findings

  completed successfully:
  CodeQL#107:Commit261a0b1pushedbyhkrlogic
  main

  Oct 14, 20261m 23s
  More actions for workflow run 107

• Fix deep-test findings (PG18 volume, sign-out 401, audit page, Reader key, UX)

  completed successfully:
  CodeQL#106:Pull request#40synchronizebyhkrlogic
  fix/deep-test-findings

  Oct 14, 20261m 19s
  More actions for workflow run 106