Skip to content

chore(deps): bump r-lib/actions/setup-r from 2.11.4 to 2.13.0 #2014

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
dependabot wants to merge 45 commits into
base: main
Choose a base branch
from
Draft

chore(deps): bump r-lib/actions/setup-r from 2.11.4 to 2.13.0 #2014

Changes from 1 commit
Commits
Show all changes
45 commits
Select commit Hold shift + click to select a range
0bd1e7e
chore(deps): bump r-lib/actions/setup-r from 2.11.4 to 2.13.0
dependabot[bot] Sep 17, 2026
a83d6d3
fix(security): allowlist https://api.github.com before urllib urlopen
seonghobae Sep 18, 2026
225260a
test(security): pin GitHub API redirect credential boundary
seonghobae Sep 18, 2026
0ae2204
fix(security): contain GitHub API redirects to admitted origin
seonghobae Sep 18, 2026
062663a
test(security): pin Strix redirect credential boundary
seonghobae Sep 18, 2026
2708a6b
fix(security): contain Strix GitHub API redirects
seonghobae Sep 18, 2026
3758b89
chore(deps): bump anyio from 4.14.0 to 4.14.2
dependabot[bot] Sep 18, 2026
4dcd25c
test(security): align Strix transport seam with dedicated opener
seonghobae Sep 19, 2026
834d285
test(security): bind authenticated openers at owned seams
seonghobae Sep 19, 2026
6d10002
merge(security): carry #2269 urllib GitHub API opener into #2278
seonghobae Sep 19, 2026
545648e
chore(deps): isolate AnyIO security owner delta
seonghobae Sep 19, 2026
c51c8d2
merge: carry AnyIO lock update onto protected owner
seonghobae Sep 19, 2026
e43a75b
fix(opencode): materialize every coverage lock input
seonghobae Sep 19, 2026
c4a73a1
docs(gap): bind coverage repair to canonical PR
seonghobae Sep 19, 2026
513302a
test(strix): bind evidence helper to trusted source root
seonghobae Sep 19, 2026
c08b13d
fix(strix): resolve evidence binder from trusted source
seonghobae Sep 19, 2026
ca7e1e7
test(strix): materialize trusted binder fixtures
seonghobae Sep 19, 2026
db1fd61
fix(strix): restore complete verified fixture tree
seonghobae Sep 19, 2026
fb9c0e2
test(strix): require consumer-free trusted binder fixture
seonghobae Sep 19, 2026
78b33a8
repair(strix): restore executable harness after binary blob corruption
seonghobae Sep 19, 2026
191bd63
test(strix): require binder-free consumer fixture
seonghobae Sep 19, 2026
ef1a866
test(strix): separate trusted gate from consumer root
seonghobae Sep 19, 2026
abc9a7d
docs(strix): bind consumer isolation evidence to exact commits
seonghobae Sep 19, 2026
00082e8
docs(strix): describe separated trusted runtime fixture
seonghobae Sep 19, 2026
782d67b
test(strix): retain canonical gate source under scan
seonghobae Sep 20, 2026
8a5251b
fix(deps): restore AnyIO owner isolation
seonghobae Sep 20, 2026
a8d6261
test(strix): red specialized fixture owner boundary
seonghobae Sep 20, 2026
bbe225d
test(strix): materialize specialized fixtures' trusted runtime outsid…
Sep 21, 2026
1794626
test(strix): pin trusted evidence-binder path
seonghobae Sep 21, 2026
657d104
repair(codeql): restore exact endpoint-set assertion
seonghobae Sep 23, 2026
f1a8dc8
chore(foundation): converge dependency and CodeQL repairs
seonghobae Sep 23, 2026
42e4198
fix(opencode): adopt AnyIO security prerequisite
seonghobae Sep 24, 2026
38cfcae
fix(test-gate): restore full branch coverage
seonghobae Sep 24, 2026
21247ef
test(queue-health): scope permission assertion to workflow token
seonghobae Sep 24, 2026
57c168b
test(queue-health): isolate collector edge cases
seonghobae Sep 24, 2026
f229816
repair(foundation): converge CodeQL endpoint contract into coverage o…
seonghobae Sep 24, 2026
3b3ce16
fix(security): update AnyIO lock for audit gate
seonghobae Sep 25, 2026
14fe2b6
fix(codeql): unblock CodeQL scan dispatch for all .github PRs
seonghobae Sep 26, 2026
950ab88
repair(foundation): converge coverage, dependency, and CodeQL owners
seonghobae Sep 26, 2026
8e1aba9
fix(ci): bind AnyIO security pin to Strix input
seonghobae Sep 26, 2026
361a9eb
merge: adopt current CI owner and repair CodeQL URL oracle
seonghobae Sep 26, 2026
1fd22f4
test(strix): require Job Analysis authority context
seonghobae Sep 26, 2026
808a8a7
fix(strix): include Job Analysis authority context
seonghobae Sep 26, 2026
b90d873
docs(strix): record Job Analysis authority context
seonghobae Sep 26, 2026
901f24f
merge(owner): align r-lib actions on security stack
seonghobae Sep 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/r-package-check.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,7 +112,7 @@ jobs:
- if: inputs.needs_tinytex
uses: r-lib/actions/setup-tinytex@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2

- uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2
- uses: r-lib/actions/setup-r@465b7d8e732ca3921382b1674c59bada9cbf3399 # v2
with:
r-version: ${{ matrix.config.r }}
http-user-agent: ${{ matrix.config['http-user-agent'] }}
Expand Down
Loading