Upgrade to latest ds9 & prx libraries

[tstromberg]

No description provided.

[kusari-inspector]

Kusari Analysis Results:

Caution

Flagged Issues Detected
These changes contain flagged issues that may introduce security risks.

While dependency analysis found no actual vulnerabilities in the internal packages from the same organization, the code analysis identified a high-severity policy violation where codecov/codecov-action@v4 is not pinned to a specific commit hash. Although the actual security risk is low given this is a trusted action used only for coverage reporting, the repository's blanket security policy requires all actions to be hash-pinned to prevent supply chain attacks. Security policies must be enforced consistently to maintain security discipline. The fix is straightforward - pin the action to a specific commit hash.

Note

View full detailed analysis result for more information on the output and the checks that were run.

Required Code Mitigations

Pin the codecov action to a specific commit hash instead of using the v4 tag. This prevents potential supply chain attacks by ensuring the exact version of the action is used consistently.

• Location: .github/workflows/test.yml:31

• Potential Code Fix:

uses: codecov/codecov-action@[specific-commit-hash]

Required Dependency Mitigations

• Consider implementing internal security scanning for private dependencies like github.com/codeGROOVE-dev/ds9 to ensure they follow secure coding practices, since public security scorecard data is not available for private repositories.

---

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: e71127d, performed at: 2025-10-29T13:32:08Z

Found this helpful? Give it a 👍 or 👎 reaction!

[kusari-inspector]

Issue: Pin the codecov action to a specific commit hash instead of using the v4 tag. This prevents potential supply chain attacks by ensuring the exact version of the action is used consistently.

Recommended Code Changes:

uses: codecov/codecov-action@[specific-commit-hash]