Affaan Mustafa 5e4f5533d7 fix(security): discord bot SSRF/log-injection/DoS hardening + bump markdown-it/js-yaml ...

- ecc-bot.mjs: validate interaction id (snowflake) and token before building the
  callback fetch URL (clears CodeQL js/request-forgery #239/#240/#241); clamp the
  remote heartbeat_interval to [1s,10m] (js/resource-exhaustion #242); strip CR/LF
  from log args (js/log-injection #246).
- Bump transitive dev deps via overrides/resolutions to patch quadratic-complexity
  DoS: markdown-it >=14.2.0 (Dependabot #45/#46), js-yaml >=4.2.0 (#42/#43).
  Both lockfiles regenerated; npm reports 0 vulnerabilities.

2026-06-18 19:50:15 -04:00

..

ecc-bot.mjs

fix(security): discord bot SSRF/log-injection/DoS hardening + bump markdown-it/js-yaml

2026-06-18 19:50:15 -04:00

register-commands.mjs

release: 2.0.0 — the agent harness operating system

2026-06-09 21:40:40 -04:00

release-announce.mjs

feat(discord): release -> #announcements auto-post + pin + GitHub Discussions (#2201)

2026-06-08 22:38:03 -04:00