Skip to content

fix: align Vue runtime, patch UnoCSS scrollbar, update deps, fix Windows/Docker builds - #1829

Closed
shahboura wants to merge 36 commits into
CorentinTh:mainfrom
shahboura:fix/deps-alignment-and-unocss-scrollbar
Closed

fix: align Vue runtime, patch UnoCSS scrollbar, update deps, fix Windows/Docker builds#1829
shahboura wants to merge 36 commits into
CorentinTh:mainfrom
shahboura:fix/deps-alignment-and-unocss-scrollbar

fix: align Vue runtime, patch UnoCSS scrollbar, update deps, fix Wind…

be4d3f8
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / SonarCloud failed Jul 5, 2026 in 4s

7 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 3 high
  • 4 low

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 83 in .github/workflows/docker-nightly-release.yml

See this annotation in the file changed.

Code scanning / SonarCloud

External GitHub Actions and workflows should be pinned to a commit hash High

Use full commit SHA hash for this dependency. See more on SonarQube Cloud

Check failure on line 42 in .github/workflows/releases.yml

See this annotation in the file changed.

Code scanning / SonarCloud

External GitHub Actions and workflows should be pinned to a commit hash High

Use full commit SHA hash for this dependency. See more on SonarQube Cloud

Check failure on line 99 in .github/workflows/releases.yml

See this annotation in the file changed.

Code scanning / SonarCloud

External GitHub Actions and workflows should be pinned to a commit hash High

Use full commit SHA hash for this dependency. See more on SonarQube Cloud

Check notice on line 10 in .github/workflows/docker-nightly-release.yml

See this annotation in the file changed.

Code scanning / SonarCloud

Write permissions should be defined at the job level Low

Move this write permission from workflow level to job level. See more on SonarQube Cloud

Check notice on line 9 in .github/workflows/releases.yml

See this annotation in the file changed.

Code scanning / SonarCloud

Write permissions should be defined at the job level Low

Move this write permission from workflow level to job level. See more on SonarQube Cloud

Check notice on line 10 in .github/workflows/releases.yml

See this annotation in the file changed.

Code scanning / SonarCloud

Write permissions should be defined at the job level Low

Move this write permission from workflow level to job level. See more on SonarQube Cloud

Check notice on line 18 in Dockerfile

See this annotation in the file changed.

Code scanning / SonarCloud

Docker containers should not run as a privileged user Low

The "nginx" image runs with "root" as the default user. Make sure it is safe here. See more on SonarQube Cloud