Skip to content

Restore installer audit dependencies - #100

Merged
rimtty merged 1 commit into
mainfrom
codex/fix-portable-release-restore
Aug 8, 2026
Merged

rimtty merged 1 commit into
mainfrom
codex/fix-portable-release-restore

Conversation

@rimtty

@rimtty rimtty commented Aug 8, 2026

Copy link
Copy Markdown
Owner

Summary

  • restore the locked WiX installer project before the release vulnerability audit
  • keep MSI publication disabled; this only lets the repository-wide audit inspect its dependencies

Root cause

The portable release workflow restored the solution but omitted the standalone installer project. Test-DependencyVulnerabilities.ps1 audits that project as part of the repository and failed before ZIP creation.

Validation

  • solution locked restore: passed
  • installer locked restore: passed
  • dependency vulnerability audit: passed with 0 vulnerable package entries

@rimtty
rimtty merged commit 8012afe into main Aug 8, 2026
1 check passed
@rimtty
rimtty deleted the codex/fix-portable-release-restore branch August 8, 2026 05:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant