Skip to content

chore: sync develop into main - #1

Merged
ancongui merged 7 commits into
mainfrom
develop
Feb 10, 2026
Merged

chore: sync develop into main#1
ancongui merged 7 commits into
mainfrom
develop

ci: grant actions:write permission in caller for DAG orchestrator

8ef78d4
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Feb 10, 2026 in 2s

2 new alerts including 1 high severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 high
  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 20 in .github/workflows/dependabot-ci.yml

See this annotation in the file changed.

Code scanning / CodeQL

Checkout of untrusted code in trusted context

Potential execution of untrusted code on a privileged workflow ([pull_request_target](1))

Check warning on line 16 in .github/workflows/dependabot-auto-merge.yml

See this annotation in the file changed.

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow

Unpinned 3rd party Action 'Dependabot Auto-Merge' step [Uses Step: metadata](1) uses 'dependabot/fetch-metadata' with ref 'v2', not a pinned commit hash