fix(deps): SCA pass — Go 1.25.10 + go-git 5.19.0 + go-billy 5.9.0 + Caddy 2.11.3#261

Merged

Cre-eD merged 7 commits into

mainfrom

fix/scorecard-vulnerabilities-go-stdlib-go-billy

May 16, 2026

Commits on May 16, 2026

fix(deps): bump Go to 1.25.10 + go-billy/v5 to 5.9.0 (Scorecard Vulnerabilities)
Cre-eD
committed
fix(deps): SCA pass round-2 — go-git 5.19.0 + Caddy 2.11.3
Cre-eD
committed
feat(security): add 23 custom Semgrep rules + opt into curated registry packs
Cre-eD
committed
fix(sast): drop yaml-unmarshal rule, exclude trusted CLIs from exec-Command
Cre-eD
committed
Merge branch 'main' into fix/scorecard-vulnerabilities-go-stdlib-go-billy
Cre-eD
authored
fix(sast): drop p/secrets registry pack — TruffleHog covers it without FPs
Cre-eD
committed
chore(sast): drop local .semgrep/rules — promoted to shared semgrep-scan
Cre-eD
committed