plano/cli/planoai
Adil Hafeez ce5a221b11 Fix code scanning and dependabot security alerts
Code scanning fixes (14 alerts):
- Fix XSS in OG image route by validating request origin against allowlist
- Fix incomplete URL sanitization in blog layout using exact hostname matching
- Bind port-check socket to 127.0.0.1 instead of 0.0.0.0
- Add explicit permissions to 7 GitHub Actions workflows

Dependabot fixes:
- Update @isaacs/brace-expansion 5.0.0 -> 5.0.1 (CVE-2026-25547)
- Update bytes 1.10.1 -> 1.11.1 (CVE-2026-25541)
- Update time 0.3.41 -> 0.3.47 (CVE-2026-25727)
- Update cryptography 45.0.7 -> 46.0.5 (CVE-2026-26007)
- Update python-multipart 0.0.20 -> 0.0.22 (CVE-2026-24486)
- Update urllib3 2.6.2 -> 2.6.3 in test lockfiles (CVE-2026-21441)
- Update Werkzeug 3.1.4 -> 3.1.5 (CVE-2026-21860)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-14 04:29:08 +00:00
..
templates Introduce brand new CLI experience with tracing and quickstart (#724) 2026-02-10 13:17:43 -08:00
__init__.py release 0.4.6 (#740) 2026-02-10 21:00:29 -08:00
config_generator.py Rename all arch references to plano (#745) 2026-02-13 15:16:56 -08:00
consts.py release 0.4.6 (#740) 2026-02-10 21:00:29 -08:00
core.py Rename all arch references to plano (#745) 2026-02-13 15:16:56 -08:00
docker_cli.py Rename all arch references to plano (#745) 2026-02-13 15:16:56 -08:00
init_cmd.py Introduce brand new CLI experience with tracing and quickstart (#724) 2026-02-10 13:17:43 -08:00
main.py Fix code scanning and dependabot security alerts 2026-02-14 04:29:08 +00:00
rich_click_config.py Introduce brand new CLI experience with tracing and quickstart (#724) 2026-02-10 13:17:43 -08:00
targets.py restructure cli (#656) 2025-12-25 14:55:29 -08:00
trace_cmd.py Introduce brand new CLI experience with tracing and quickstart (#724) 2026-02-10 13:17:43 -08:00
utils.py Rename all arch references to plano (#745) 2026-02-13 15:16:56 -08:00
versioning.py Introduce brand new CLI experience with tracing and quickstart (#724) 2026-02-10 13:17:43 -08:00