getplumber/plumber

v0.4.6 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 10d Pipelines

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ci-cd compliance pipeline security

Summary

AI summary

Updates 🔧 Chores, 👷 CI/CD, and 0.4.6 across a mixed release.

Type	Severity	Summary	CVE
Dependency	Low	Bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 Bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency	Low	Bump github/codeql-action/init and analyze from 4.36.2 to 4.37.0 Bump github/codeql-action/init and analyze from 4.36.2 to 4.37.0 Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

ci: bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 (ba7655e)
ci: bump github/codeql-action/init from 4.36.2 to 4.37.0 and bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (4c18e43)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track getplumber/plumber

Get notified when new releases ship.

About getplumber/plumber

v0.4.0 Runs with nothing scoreable now fail closed (exit 1)
v0.4.0 Default artifact name changed to plumber-report
v0.4.0 gate no longer exposes 'compliance'; redefines 'passed' as 'score gate met'