Merge branch 'main' into dependabot/cargo/uuid-1.22.0

Author: hyperpolymath

.github/workflows/cflite_batch.yml

@@ -24,7 +24,7 @@ jobs:
           sanitizer: ${{ matrix.sanitizer }}
           mode: batch
           output-sarif: true
-      - uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v3
+      - uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v3
         if: always()
         with:
           sarif_file: vulnerabilities.sarif

.github/workflows/cflite_pr.yml

@@ -25,7 +25,7 @@ jobs:
           sanitizer: ${{ matrix.sanitizer }}
           mode: code-change
           output-sarif: true
-      - uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v3
+      - uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v3
         if: always()
         with:
           sarif_file: vulnerabilities.sarif

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
       - run: cargo check --workspace
 
   test:
@@ -33,7 +33,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
       - run: cargo test --workspace
 
   fmt:
@@ -58,7 +58,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: clippy
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
       - run: cargo clippy --workspace -- -D warnings
 
   build:
@@ -69,7 +69,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
       - run: cargo build --release --workspace
       - uses: actions/upload-artifact@v7
         with:

.github/workflows/codeql.yml

@@ -29,12 +29,12 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v3.28.1
+        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.28.1
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v3.28.1
+        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.28.1
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/hypatia-scan.yml

@@ -25,7 +25,7 @@ jobs:
           fetch-depth: 0  # Full history for better pattern analysis
 
       - name: Setup Elixir for Hypatia scanner
-        uses: erlef/setup-beam@3580539ceec3dc05b0ed51e9e10b08eb7a7c2bb4 # v1.18.2
+        uses: erlef/setup-beam@9d5b75ddfda22fb979d2270283237aef8aa68d6b # v1.18.2
         with:
           elixir-version: '1.19.4'
           otp-version: '28.3'

.github/workflows/quality.yml

@@ -18,7 +18,7 @@ jobs:
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@041f07e9df901a1038a528e5525b0226d04dd5ea # v3.93.6
+        uses: trufflesecurity/trufflehog@6c05c4a00b91aa542267d8e32a8254774799d68d # v3.93.8
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}

.github/workflows/scorecard-enforcer.yml

@@ -30,7 +30,7 @@ jobs:
           publish_results: true
 
       - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v3
+        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v3
         with:
           sarif_file: results.sarif
 

.github/workflows/scorecard.yml

@@ -27,6 +27,6 @@ jobs:
           results_format: sarif
 
       - name: Upload results
-        uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v3.31.8
+        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.31.8
         with:
           sarif_file: results.sarif

.github/workflows/secret-scanner.yml

@@ -18,7 +18,7 @@ jobs:
           fetch-depth: 0  # Full history for scanning
 
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@041f07e9df901a1038a528e5525b0226d04dd5ea # v3
+        uses: trufflesecurity/trufflehog@6c05c4a00b91aa542267d8e32a8254774799d68d # v3
         with:
           extra_args: --only-verified --fail
 

.hypatia/scan-cache/fix-http-to-https.hashes

@@ -0,0 +1,121 @@
+36a6db1bab17252b7787e2d1deaed98497787570b1cbfaa2207d2fd29f5d74bd  src/slm/src/lib.rs
+d22287bd10ef5f5ef2c15062b9d0335cdf90a32b5c6d13bdb6cf2a113167e871  scripts/mass-apply-templates.sh
+b1208f7bb51a9494e5d42b38a024717589bc957adbe9468dc2fd69bc2c967f91  training/violations/12-language-policy.md
+3d6cc93a424c1d4c6488b566b7c571fdedc50bd3775860eb0244414b7026d471  .github/ISSUE_TEMPLATE/bug_report.md
+ecfb61181fe041a15d424c3ae37a4e4a4ece7ecc7bb8eec71852718f426936df  scripts/github-settings.sh
+5c4423b0a86cc8f12aee73f323a08ba1a183fdd1cce23cca89ab4d81b756bb8c  src/oracle/Cargo.toml
+4bec44dea35f5c2600a55e32b79126c6133bea7329070f62575715a871dbce3b  contractiles/k9/README.adoc
+f17cf4815bd4575e1ab4608d7e004de28ddbb594c8a12a1520617480b9c99c23  .github/workflows/language-guard.yml
+a2e1a0a6c5dc57d3514ed1a5ebe4e9af8ccc265120edbeb5f4e6c84a2817c1ac  TOPOLOGY.md
+ee58dd9f056176c8120959ae29f254d67c44ff65a12ce540fb77c909f122c004  .github/ISSUE_TEMPLATE/question.md
+f321125520dbea25bd633f330d0af2763d0a6d3938e5d4320d7d960b551d7563  .github/workflows/scorecard.yml
+4bf2d728505dbcfd93924ed06f6d95aee8c53af3007bf47dc1e4aa63aba51ef9  .github/workflows/hypatia-scan.yml
+04c48b67447ab8fb5807e1f70190f5f60e8e8d053d46d3054f4b6f5c6edb716a  Cargo.toml
+2b799c4389c281621b913c75a1daf558f37ebcfc4479f06fc8fece86321cbf29  src/contract/src/lib.rs
+4610d655cd806f4cadc2382ae21e274a06ffe55a7a785c7820ea2b4d0fcbbe1c  .github/workflows/cflite_batch.yml
+6adab4f4b7c57a975b081232321aa5e573fc6ab7ebfb63b96ea367b4411c697f  src/main.rs
+560d02bd0f70519e79ed8c1dbcf546a6b11b70724d6a098e4924beae2e0238f4  training/violations/02-documentation.md
+62245ce7a7443e26da410b1d06d3abad9d52a97642eea481dfa913a44c0c1ce4  training/compliant/rust_helper.json
+31c294381aadd567537c798b4cbe7e33c6c0bf3ead5bafd518b10cfc993d9956  training/redteam/injection/polyglot_file.json
+6f61941b0913bad5fe21d46fe34cafbd7c677aeae3d25757df998cb0e129eee6  training/redteam/bypass/typescript_as_json.json
+f08944e398e6688645118262a2e19e30518b9f5a85bdb0663e5bb93f550fa2b9  scripts/github-bulk-settings.sh
+f922f55abb20b2e1ad7a377c94c6e30b8d8b49950584316038fbe1b2cf06ff77  docs/REPO_VARIATIONS.adoc
+91888a530dbe2c30ffecb70742ab0a4320d13236e9e0b7a3ba82a85a7ecd4bcb  training/violations/11-accountability.md
+c4931bcbc0cbe19b719a506293728e5319f39114337b701142f8a7374700a208  training/violations/06-semantic-web.md
+8865b6496fb2249485d83b6809cc4773a4f0e06b19a7573ee7eb5b887a2c5ddc  .github/workflows/wellknown-enforcement.yml
+3b9daf275226dbe157b9f87b06f05545619dc1825b81ccc87a89f2eaf4bc126d  training/redteam/encoding/hex_secret.json
+7cf3f6bb773e65b9adf551e8655d3c214fc96f19688b25353c3e2e94ee2ddccf  hooks/validate-spdx.sh
+f541e6e2f9e34c96a60bcce07e2ff9190d87e62544e03b6d1f16c0027ec72e69  docs/REPO_STANDARDIZATION.adoc
+86938d0276346d6ff70deea81c144e2890cc869e510177a782825dd0699105e3  training/violations/10-governance.md
+599e39c82d9180ecbcdf0dc5792ab3f92aabc099367004bf3ea5e6cabef55f64  training/redteam/bypass/python_in_comments.json
+8e17f111e302bf6df5f2714ac2c644ea4b7b5a5b02041f5591b19b21a257324f  training/violations/01-infrastructure.md
+560cb487a5d1c80b51dc5b93e54f0943f173be660dd8d8f45ab0ab164059d2fc  training/redteam/obfuscation/split_typescript_markers.json
+6427132bd656819df1481022870c25abb6fda1277ab755ed911cff739529b92b  templates/hooks/install-hooks.sh
+42c6f32c21b692324b8730633aa52114172163be4f25470a04992abeac58c149  training/redteam/boundary/unicode_extension.json
+8ae456b7ddecf0f475ecdb2326b0b02052b06c3047559871c3e03cea4f2c4513  RSR_OUTLINE.adoc
+6841e7284e3a267f2820e6979efcfb44306cefc1e6808420c61918e4f6face02  hooks/validate-permissions.sh
+98acc342cf8cc34ee108fb15271ca4815f86d9fcc7df002b2c17538b1e9843bc  .github/workflows/mirror.yml
+20c7092acd5fce35504331cbcba27a07c71a16fdd5ea569f8515f8124188eee2  docs/DIRECTORY_STRUCTURE.adoc
+ab37109ac0acbe62f14f30d0bd560551a74729d20902437de88d3681ccaa04e3  .github/workflows/cflite_pr.yml
+9c2a6eb12893bc4a6a385264488fa2c09397d4a226f1364a43f7f0052e834865  training/redteam/bypass/typescript_in_markdown.json
+48f64839c093cf875fc13189924dbd9e6184b244a5644c3778d0001e6b8ff7ba  README.adoc
+099e3b13533311371f2b7efaa3d9ba3c4a2759f0bd88927105974680d84855d7  scripts/apply-common-files.sh
+900e054019472b269778f35b7b81945411bcfd3cc444526b4b7428de6946efc9  ABI-FFI-README.md
+e5f9382077a2c7f74f98312015ddb55f1229a7c68d69de5240de2e873d0a505c  training/redteam/boundary/whitespace_only.json
+c935ce5535db7df091ad0853d9872c5d4ab2cc27fcd3710ec18502c1389e03ce  training/edge_cases/verbose_rust.json
+9323917478cd6e0091e7813e47cfe70a987d128e66895187e493a5c97c998a0c  training/README.adoc
+e62f976e9eb993e8fa3ea7e99bcfdba28e5898fff7a41c961b8151cefee8ef36  .github/workflows/guix-nix-policy.yml
+7357a1d5a54dab6373cbce9b9c3c4809907f756b7bd369b4f75d3eb276adddea  fuzz/Cargo.toml
+214bb2bc81e3e2fbbcfcd7a1415e49811fb948e0ddc4861332c607719f43fc6b  docs/CICD_HYPER_A_INTEGRATION.adoc
+f874e549510c17410c2759864c5559072dfead364411bb2f3b0095c6b29e5387  src/arbiter/lib/conative_gating/application.ex
+101cb742c1cb66b36e740deb89ca53dcf54e754499af88eb07286e9e99298dd4  training/violations/07-licensing.md
+3ed27e65b5ce47eeb736ad01b88528ac4c146ab203390dc4020155ea63762893  scripts/deploy-templates.sh
+2eea81e69ec8e439776e1c793e364b53ff6fcd2c96f4c2688dad0ffdf37df537  training/violations/05-web-standards.md
+07efd5aa99ec74c71ff2dc7ab4a2712d2a4bf7846c4a30ec0842527a0ea44be7  CONTRIBUTING.adoc
+0e9c4d86589e2e26e172af25faccfe3a836dc1d6ed3ba9d2a897a92368498daa  docs/STATE_ECOSYSTEM_SCHEMA.adoc
+101ace35aa8f4d683d66facabfe2748e73a32a450e20dc3a8598be2a9944c1fa  docs/REPO_CONSISTENCY.adoc
+38d1ea673c098b105dde769844ac9910b95dad4a5e8633c363a53a98ddff048b  CONTRIBUTING.md
+b142b273c2c38d130fbb3277b13093b919aad9e7b2dfa46ed618b3067d8b1b39  training/redteam/obfuscation/hidden_extension.json
+99edfd4d7967e13c1930b5c612d5684e6cddd812fa191b6192820d279c143023  hooks/validate-codeql.sh
+a062d66844de4e399924f13739309fcd6fa478edca7a6733ba2f9bdb85b9f45d  .github/ISSUE_TEMPLATE/custom.md
+9055941ba3e826b677e9ce8c986861efc404d0d8074fef91e10ff3d858ca273b  src/contract/Cargo.toml
+24c729f66d1f38ac1b757e793249f7cc686b38d0b6c7e99129c66ad28f55cebf  fuzz/fuzz_targets/fuzz_main.rs
+b1abf25f1fb7c951fead130c6c904d4fa5ad619f7ef0e8f528353c6069394ced  training/redteam/boundary/empty_file.json
+4030bc5dd7924d45348e4726d9bbb2d701c708d4b035ac57b5e4e212a4b62a10  .claude/CLAUDE.md
+b14feb0a861b577ac2dd6f4b19868b12964b65cb8c8139185df49e5ef31a62f6  docs/GRIMREPO_SCRIPTS.adoc
+0a9572710bdc24dbc2b4188d5531dafefd3a39e0628a913fb7c457196d772b33  .github/ISSUE_TEMPLATE/feature_request.md
+ad1dcf26f45050c2f0442198a673e6c68536f5551866371f6162ecfe74a94572  .github/workflows/codeql.yml
+963950bfec5447c3c2ff32324a31b9f7484d1698f00e668fcf794c1ac419cd53  training/edge_cases/obfuscated_logic.json
+67264aac7aafa5bd1175ea530c75a78c74b9ed770cc601af012d61acdecc5bd2  .github/workflows/rust-ci.yml
+c234d86a9090ff1c447267671a020b583efb09f6d941f8fb2476f038df721b45  src/arbiter/mix.exs
+decebb6ee5a433761d5ef775f401b9ba8f741efdaa190a21796154a47dcceade  training/violations/03-security.md
+f8e4d83c99aa54d578229da6bcd03a20842811a8c42aff330efd0f20c81ff785  .clusterfuzzlite/build.sh
+04ec5497f77b0ce350d2dbde3532fe752c59d84b422560a281b4e9c88b895464  .github/workflows/ts-blocker.yml
+e9fabe0517f2f623a81e1350b0f8b9973e81a5ffc35a5d62c5a7e283bd97bedd  training/compliant/elixir_genserver.json
+d1c8a1bcc665f0ff22a66acb0263b4cc71a824bd023a277cc970cb621e370ee1  training/violations/08-ergonomics.md
+9a9c4d84c3d79b930ea14507472fe2cb1f95b4fced3db5edac285794a66abe05  docs/BADGE_SCHEMA.adoc
+a9f1e734d13f341d4a2a58613b9f0e3ef17b7395ac3c43e61b8593c0bc27dd8d  MAINTAINERS.adoc
+0f55281e37cede2b8363e27ed01d8b8018afe29e00ce75b4da2a05b2eb071e0c  .github/workflows/secret-scanner.yml
+d805e952e48d1a2928c67772e7becb822261cace1b7f0f62527d049ade6577b6  docs/CITATIONS.adoc
+09a890e589d29f8dad13be981556a51762ffd47dd6dc0529d67c78de3b25277f  CODE_OF_CONDUCT.md
+d43bd0528152a32a4992fd0bb34b169e2d4dededc93b82710918d3ec48194a25  scripts/bulk-standardize.sh
+315918811d458ecdb45787caac3a2e71a2fad46591eaa7e3bdd180838167cf90  ARCHITECTURE.md
+fb7b0673fccb765529423ed2f9c4d32f118b04b4c74d141bb1479956c39ad667  training/violations/hardcoded_secret.json
+e9bbff192230a8c3c8f847f81bfd7c8313cf1f39943eb62c04d9f6c004461da9  SONNET-TASKS.md
+00571466e0da83f37a89b974696e6fd6bba2df25fe4c329be424df5c320b0657  training/redteam/encoding/base64_secret.json
+8fab8a91ced4c7d7961f19222e9944a3792a6b4cc10289911f4b4234160fbebe  src/slm/Cargo.toml
+637ed51b1ff458cf92fbdc14fb4fdae58abd1b2954f94f60b3cbd5b9126c1c75  .github/workflows/rsr-antipattern.yml
+241a5bd531e0b9e2d6657c9cf1914694dd022f21a8d5f4b8b4095312b8a32598  training/violations/09-lifecycle.md
+bf781ca93f9444ae4ee6b3e498e543dcdcd3bfe88a5563e7064c010ba5d8e988  training/edge_cases/python_exception_valid.json
+743a0aef9357d4b5a2ba89ee2c8d935ef777967689220205bacbdc9eeacc094f  examples/web-project-deno.json
+0578be3e709481b498ed85696e625d59d4c4a75dccffb3ab15b5664f2faf3b5b  training/redteam/obfuscation/case_variation.json
+349b92242bc9c0564f4491e12919dcb709341904f8b6b51d4b3c2ef31218e70a  .github/workflows/quality.yml
+af437230024e93606cee1bc3d168201f095de27067fe3c5e8a03fa807718a7b6  scripts/apply-justfiles.sh
+04d33bca2141c117073cdf8f925f98f688d305b939dbd8c57c685f63f60123c8  .github/workflows/security-policy.yml
+8d073f916200d5cbc67ac6df25252f67740b9c162fa68fc972cdc311c1ed40ea  .github/FUNDING.yml
+859ef6cafd5bfaf788a8e47cafa3aab9336118af28b83c3e9177b5d048a195a1  training/redteam/injection/secret_in_url.json
+da8774ad19915a75cfe74d3462b5234244cdb47d21fe8efb7658f5651cf94008  .github/workflows/instant-sync.yml
+aa61aebd454b0c20e4003e5effa4ef5235ed840e54037920481ce46450471feb  .github/ISSUE_TEMPLATE/documentation.md
+430ee37dbafbe4daf04fec2e64a4aa7589f9c2a09e4182a7d3836722f13c1862  docs/VSH_IMPROVEMENTS.adoc
+ef48fda7c37dc5456bf18e983fbf82e626cbc1279f2fe2e4ce7842ddfdb5d3e7  SECURITY.md
+ad10dc85bb86974ed38e2bb2154947df5f60d0bb91ffc2fff423e97e79f39c0f  contractiles/README.adoc
+bebcb050fe1ee4507c9382c3d4820da9da63e0cb0168284ebeaf73fcefc0fe39  training/redteam/injection/concatenated_secret.json
+1c2f5a2852d7d91c3d144ba9062ed1ebda79ab0922cbaea947e456db72d528f9  scripts/generate-badges.sh
+143d77b46dc9a6961ff76a621030e600ac3501592cea6b3da565bc87c5496830  docs/ZOTERHO_INTEGRATION.adoc
+bd6e93928cba4d235064549b4a9dcb0659ffcb4a1421926e60438a9642e5760d  .github/workflows/ci.yml
+e5f4b9549ae2231ac3d7583b8aa22fae41052c82cf6914e277c2af87cc320766  hooks/validate-sha-pins.sh
+d49f8597b574270f9169ede4ca6e6f3b0023e94f9afc2043d9425be34ea086e1  examples/SafeDOMExample.res
+2e24442c4579ea8ffecac31d41a290901e3a89441e3972319aeb2fb0dfa56c81  src/oracle/src/lib.rs
+0580027323b8f78f505118f0d8cd84821b29c38fe1d4a89c2d000028766dafd3  training/violations/npm_without_deno.json
+0c56b14080888e9473345676bb2e485c90d0bcab1eef6bd662251324b3aa21ce  docs/MAAF_INTEGRATION.adoc
+5269c2a18e84a4399f736720d8bc8b7602e617f2feb9016a2cbb26297bfd92fe  ROADMAP.adoc
+72860a89ce57ea0aedde69b40f58acc0afe4d4d3df6671d9affdbca47f2518ea  src/arbiter/lib/conative_gating/consensus_arbiter.ex
+ee2f37cfbde3f4992efec2746b2bf7b040090cfb5b0b7b56b73e2b10b95e192c  scripts/reconcile-wharf-repos.sh
+e3a78cc772e4d41a6027fbd9691395db9f2ab6e8c3aaf729b14e71feab8acdbe  .clusterfuzzlite/project.yaml
+e2e166ccbb4e0cc093f26a7c3adbbd12349ee2021038dbebbc9a4258ff941081  .github/workflows/npm-bun-blocker.yml
+007afa574b138b34bdfa329ef918808d31e93ecd5a87eb5ae1067e97027d130c  training/violations/typescript_file.json
+1c8165d5f302af095d9cf39f9d9f5cb0d7edd2a14ddcde0c76b8dc4811f69688  training/violations/04-architecture.md
+5b49c3ed242f4e76014d7b1e9f477172dbae7fb7bf4bbc5e4aad8eaab93ab32b  .github/workflows/workflow-linter.yml
+ed28c0ae9d1ad17d3300b3dacb051e3ff17b6240c40d8b67bf2cc6ffba8a0b38  .github/workflows/scorecard-enforcer.yml
+77d2a3db00786ede66fde252edb4b782059c150885f02b5bef1a6ff9096b2666  .github/dependabot.yml
+b148ba48c84e70bb256a6d39cd6a72d81e6b155ba874e3b34e2187b96425761c  PALIMPSEST.adoc