Greyson LaLonde 299782765c ci: ignore GHSA-rrmf-rvhw-rf47 (torch alias of PYSEC-2025-194) ...

* ci: ignore GHSA-rrmf-rvhw-rf47 (torch alias of PYSEC-2025-194)

pip-audit reports CVE-2025-3000 under its GHSA id, which the existing
PYSEC-2025-194 ignore does not match. Same advisory: memory corruption
in torch.jit.script, CVSS 1.9, local-only, no fix for torch 2.11.0.

* ci: sync GHSA-rrmf-rvhw-rf47 ignore into pre-commit pip-audit

2026-06-10 18:45:42 -07:00

..

codeql

chore: fix codeql coverage and action version (#4454)

2026-02-11 18:20:07 +08:00

ISSUE_TEMPLATE

restrict python version compatibility (#1731)

2024-12-09 14:00:18 -05:00

workflows

ci: ignore GHSA-rrmf-rvhw-rf47 (torch alias of PYSEC-2025-194)

2026-06-10 18:45:42 -07:00

CONTRIBUTING.md

docs: add CONTRIBUTING.md

2026-03-25 16:13:55 +08:00

dependabot.yml

chore: group dependabot security updates into single PR (#4351)

2026-02-03 08:53:28 -06:00

security.md

chore: update security reporting instructions

2026-05-04 22:31:35 +08:00