From 80aaf15f1ef68aab235d38841e81f51447e4ecf9 Mon Sep 17 00:00:00 2001 From: Md Shariar Shanaz Shuvon <83355567+shuvonsec@users.noreply.github.com> Date: Thu, 17 Sep 2026 03:17:25 +0800 Subject: [PATCH 1/2] fix(deps): bump fixture flask and axios to clear Dependabot alerts SBOM manifests in fixtures/attack_paths_intel are not installed; keep pins current so GitHub Dependabot stops flagging them. From c2b079184bc7960d709f70b9a60d027b38df9662 Mon Sep 17 00:00:00 2001 From: Md Shariar Shanaz Shuvon <83355567+shuvonsec@users.noreply.github.com> Date: Thu, 17 Sep 2026 03:17:27 +0800 Subject: [PATCH 2/2] fix(deps): bump fixture axios pin in SBOM package.json Companion to flask bump; clears remaining Dependabot alerts on the intel fixture.