fix(ci): resolve real test failures + bump 8 vulnerable transitive deps#9

Merged

osvalois merged 4 commits intomainfrom

fix/devsecops-paloma-access

Apr 29, 2026

Commits on Apr 29, 2026

fix(ci): wire devsecops.yml to fetch private cuervo-ai/paloma

Oscar Valois
and
claude
committed
fix(deny): clarify license for first-party Paloma crates

Oscar Valois
and
claude
committed
fix(ci): resolve real test failures + bump 8 vulnerable transitive deps

Oscar Valois
and
claude
committed
fix(tests): expose and resolve hidden failures revealed by honest CI

Oscar Valois
and
claude
committed