AkitaOnRailsandClaude Opus 4.8 4b39007c55 fix(security): bump importer rustls to 0.23.45 + audit importer lockfile in CI ...

RUSTSEC-2026-0285 (rustls <0.23.45, TLS1.3 wrong-encryption-level handshake
accept; GHSA-2mjx-qc3c-rqvc / referenced by GHSA-wc7c-cm87-463c). The main and
relay lockfiles were already at 0.23.45; the importer companion sat at 0.23.41
because CI never audited companions/ai-memory-importer/Cargo.lock. Bump it and
add that lockfile to the cargo-audit step so the drift class is caught. Also
drop the now-stale RUSTSEC-2026-0194/0195 (quick-xml) ignores — quick-xml is in
none of the three lockfiles.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MDbhmszrjG9s5MrPrTuNtm

2026-09-30 21:18:26 -03:00

..

ai-memory-importer

fix(security): bump importer rustls to 0.23.45 + audit importer lockfile in CI

2026-09-30 21:18:26 -03:00

ai-memory-macos

fix(macos): route companion build through Xcode for SwiftUIMacros

2026-09-22 16:31:05 -03:00

ai-memory-relay

feat(relay): queue external lifecycle events across restarts

2026-09-21 02:21:59 -03:00