Greyson LaLonde 09ffe87fbb ci: ignore pip-audit findings without published fixes ...

Adds joblib, markdown, nltk, onnx, pyjwt, torch and transformers
advisories that have no fixed version available (or are disputed)
to the pip-audit ignore list. Rationale recorded next to each ID.

2026-05-20 21:40:30 +08:00

..

codeql

chore: fix codeql coverage and action version (#4454)

2026-02-11 18:20:07 +08:00

ISSUE_TEMPLATE

restrict python version compatibility (#1731)

2024-12-09 14:00:18 -05:00

workflows

ci: ignore pip-audit findings without published fixes

2026-05-20 21:40:30 +08:00

CONTRIBUTING.md

docs: add CONTRIBUTING.md

2026-03-25 16:13:55 +08:00

dependabot.yml

chore: group dependabot security updates into single PR (#4351)

2026-02-03 08:53:28 -06:00

security.md

chore: update security reporting instructions

2026-05-04 22:31:35 +08:00