GitHub Actions Security Analysis

Workflow runs for GitHub Actions Security Analysis

• fix(uri_template): use surrogateescape for unquote and quote to preserve non-UTF-8 octets (#3721)

  completed successfully:
  GitHub Actions Security Analysis#2333:Pull request#3724openedbynikolas-sapa
  nikolas-sapa:fix/uritemplate-surrogateescape-3721

  Oct 17, 202628s
  More actions for workflow run 2333

• fix: exit stdio server cleanly on interrupt

  completed successfully:
  GitHub Actions Security Analysis#2332:Pull request#2745synchronizebyhe-yufeng
  he-yufeng:fix/stdio-keyboardinterrupt-clean-exit-v2

  Oct 17, 202626s
  More actions for workflow run 2332

• Fix session group refresh 3713

  completed successfully:
  GitHub Actions Security Analysis#2331:Pull request#3722openedbyabhay-2108
  abhay-2108:fix-session-group-refresh-3713

  Oct 17, 202621s
  More actions for workflow run 2331

• Add cache fields to directory read and _meta to Skill (#3719)

  completed successfully:
  GitHub Actions Security Analysis#2330:Commit9f66f37pushedbyKludex
  main

  Oct 16, 202634s
  More actions for workflow run 2330

• Add cache fields to directory read and _meta to Skill

  completed successfully:
  GitHub Actions Security Analysis#2329:Pull request#3719synchronizebyKludex
  align-skills-directory-caching-and-meta

  Oct 16, 202635s
  More actions for workflow run 2329

• Add cache fields to directory read and _meta to Skill

  completed successfully:
  GitHub Actions Security Analysis#2328:Pull request#3719openedbyKludex
  align-skills-directory-caching-and-meta

  Oct 16, 202628s
  More actions for workflow run 2328

• docs: note Windows OpenBLAS hang with stdio tool imports

  completed successfully:
  GitHub Actions Security Analysis#2327:Pull request#3717openedbyAmiirhosseini
  Amiirhosseini:docs/windows-openblas-stdio-import

  Oct 15, 202625s
  More actions for workflow run 2327

• Refresh session components on re-registration in ClientSessionGroup

  completed successfully:
  GitHub Actions Security Analysis#2326:Pull request#3716openedbyabhay-2108
  abhay-2108:fix-session-group-refresh-3713

  Oct 15, 202638s
  More actions for workflow run 2326

• fix: contain lone-surrogate serialization failures in transport writers

  completed successfully:
  GitHub Actions Security Analysis#2325:Pull request#3708openedbynaveecode
  naveecode:fix/3707-surrogate-serialization

  Oct 14, 202630s
  More actions for workflow run 2325

• fix(client): avoid quadratic buffering in stdio_client stdout reader

  completed successfully:
  GitHub Actions Security Analysis#2324:Pull request#3706openedbymaxiaochaos
  maxiaochaos:cursor/stdio-linear-line-buffer-bfc1

  Oct 14, 202625s
  More actions for workflow run 2324

• fix(client): avoid quadratic buffering in stdio_client stdout reader

  completed successfully:
  GitHub Actions Security Analysis#2323:Pull request#3705openedbymaxiaochaos
  maxiaochaos:cursor/stdio-linear-line-buffer-bfc1

  Oct 14, 202628s
  More actions for workflow run 2323

• Give each modern SSE response its own header list

  completed successfully:
  GitHub Actions Security Analysis#2322:Pull request#3704openedbyguptaishaan
  guptaishaan:fix-3701

  Oct 14, 202630s
  More actions for workflow run 2322

• fix(skills): unquote percent-encoded dot-segments during URI traversal validation

  completed successfully:
  GitHub Actions Security Analysis#2321:Pull request#3703openedbychauvuusvn
  chauvuusvn:fix/skills-unquote-traversal

  Oct 14, 202631s
  More actions for workflow run 2321

• Fix quadratic time reading large stdio responses

  completed successfully:
  GitHub Actions Security Analysis#2320:Pull request#3700openedbyguptaishaan
  guptaishaan:fix-3699

  Oct 13, 202631s
  More actions for workflow run 2320

• Return invalid params for unknown requested tools

  completed successfully:
  GitHub Actions Security Analysis#2319:Pull request#3697synchronizebyKludex
  codex/unknown-tool-invalid-params

  Oct 13, 202626s
  More actions for workflow run 2319

• Return invalid params for unknown requested tools

  completed successfully:
  GitHub Actions Security Analysis#2318:Pull request#3697openedbyKludex
  codex/unknown-tool-invalid-params

  Oct 13, 202627s
  More actions for workflow run 2318

• Return invalid params for unknown prompts and missing arguments (#3696)

  completed successfully:
  GitHub Actions Security Analysis#2317:Commit754254cpushedbyKludex
  main

  Oct 13, 202623s
  More actions for workflow run 2317

• Return invalid params for unknown prompts and missing arguments

  completed successfully:
  GitHub Actions Security Analysis#2316:Pull request#3696synchronizebyKludex
  codex/prompt-invalid-params

  Oct 13, 202628s
  More actions for workflow run 2316

• Return invalid params for unknown prompts and missing arguments

  completed successfully:
  GitHub Actions Security Analysis#2315:Pull request#3696synchronizebyKludex
  codex/prompt-invalid-params

  Oct 13, 202628s
  More actions for workflow run 2315

• Read MCP Apps tool results from notification params (#3679)

  completed successfully:
  GitHub Actions Security Analysis#2314:Commit9db497epushedbyKludex
  main

  Oct 13, 202621s
  More actions for workflow run 2314

• Read MCP Apps tool results from notification params

  completed successfully:
  GitHub Actions Security Analysis#2313:Pull request#3679synchronizebyKludex
  codex/correct-clock-notification-example

  Oct 13, 202619s
  More actions for workflow run 2313

• Return invalid params for unknown prompts and missing arguments

  completed successfully:
  GitHub Actions Security Analysis#2312:Pull request#3696synchronizebyKludex
  codex/prompt-invalid-params

  Oct 13, 202621s
  More actions for workflow run 2312

• Return invalid params for unknown prompts and missing arguments

  completed successfully:
  GitHub Actions Security Analysis#2311:Pull request#3696openedbyKludex
  codex/prompt-invalid-params

  Oct 13, 202626s
  More actions for workflow run 2311

• Forward server stderr to errlog via pipe instead of inheriting its fd

  completed successfully:
  GitHub Actions Security Analysis#2310:Pull request#3694openedbyktkreddy
  ktkreddy:fix-156-jupyter-stderr

  Oct 13, 202620s
  More actions for workflow run 2310

• Update httpx2 and datamodel-code-generator (#3645)

  completed successfully:
  GitHub Actions Security Analysis#2309:Commitc9356a2pushedbyKludex
  main

  Oct 12, 202638s
  More actions for workflow run 2309