[MAIN-HEALTH-SEC-002] Restore dependency security gates - #3673

Draft

ootakazuhiko wants to merge 15 commits into

mainfrom

security/main-high-audit-recovery-20260730

Commits on Jul 30, 2026

fix(deps): update direct vulnerable dependency families
ootakazuhiko
committed
b4f09b0
fix(deps): remediate transitive advisory chains
ootakazuhiko
committed
4a37159
test(security): verify dependency remediation compatibility
ootakazuhiko
committed
5f2bc37
fix(deps): stabilize patched lockfile peer snapshots
ootakazuhiko
committed
b7a0f1c
fix(ci): include dependency patches in sparse validation
ootakazuhiko
committed
777cc03
test(security): enforce dependency compatibility in verify lite
ootakazuhiko
committed
d112551
fix(ci): package dependency patches in container builds
ootakazuhiko
committed
c5807f7
fix(ci): preserve verify-lite summary on compatibility failure
ootakazuhiko
committed
ea13478
fix(ci): record dependency compatibility evidence
ootakazuhiko
committed
585498c
fix(ci): install complete container test workspace
ootakazuhiko
committed
ec6c544
chore(deps): normalize minimatch patch metadata
ootakazuhiko
committed
363b6d2
fix(test): tolerate volatile local profile state
ootakazuhiko
committed
e35e690
fix(deps): align lock with reproducibility install
ootakazuhiko
committed
40a2b79
fix(ci): let flake detection observe completed suites
ootakazuhiko
committed
30e827c
fix(ci): isolate reusable SBOM concurrency
ootakazuhiko
committed
0589751