Vijay Janapa Reddi 5b3e84051c fix(security): CodeQL — Actions permissions, DOM XSS, sanitization, audit regex ...

- Workflow: default contents:read for jobs without explicit permissions
- audit_math_rendering: match </script> and </style> with optional whitespace
- SocratiQ: tooltip via DOM APIs; iterative HTML stripping; quote normalization
  for JSON repair; repeat-until-stable tag cleanup in SR/copy flows
- Rebuild bundle.js for Quarto embed path

2026-05-10 17:13:23 -04:00

..

contributors

feat(all-contributors): LLM-driven type classification + gemma3:4b

2026-04-30 08:56:42 -04:00

_release-prepare.yml

ci(deps): bump actions/setup-python from 5 to 6 (#1672)

2026-05-04 07:39:36 -04:00

all-contributors-add.yml

chore(all-contributors): upgrade LLM from gemma3:4b to gemma3:12b

2026-04-30 08:58:00 -04:00

all-contributors-auto-credit.yml

fix(infra): switch auto-credit workflow to pull_request_target

2026-05-01 17:11:53 -04:00

auto-label.yml

ci: complete interview→staffml label migration across workflows + templates

2026-05-02 13:23:13 -04:00

book-build-container.yml

Merge pull request #1577 from harvard-edge/dependabot/github_actions/dev/actions/upload-artifact-7

2026-04-27 09:11:20 -04:00

book-preview-dev.yml

…

book-publish-live.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

book-validate-dev.yml

cleanup(ci): drop redundant !tinytorch/** exclude from book-validate-dev paths

2026-05-04 22:13:15 -04:00

ci-sanity.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

codespell.yml

ci(deps): bump actions/checkout from 4 to 6 (#1664)

2026-05-04 07:39:39 -04:00

infra-build-sitemap.yml

…

infra-cleanup-caches.yml

…

infra-container-linux.yml

fix(security): CodeQL — Actions permissions, DOM XSS, sanitization, audit regex

2026-05-10 17:13:23 -04:00

infra-container-windows.yml

…

infra-health-check.yml

…

infra-link-check.yml

…

infra-link-rot-nightly.yml

…

infra-publish-guard.yml

…

infra-visual-smoke.yml

ci(deps): bump actions/upload-artifact from 4 to 7 (#1674)

2026-05-04 07:39:29 -04:00

instructors-preview-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

instructors-publish-live.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

instructors-validate-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

kits-build-pdfs.yml

…

kits-preview-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

kits-publish-live.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

kits-validate-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

labs-preview-dev.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

labs-publish-live.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

labs-validate-dev.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

mlsysim-build-pdfs.yml

fix(mlsysim): publish tutorial slides alongside the docs site

2026-04-27 17:27:48 -04:00

mlsysim-preview-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

mlsysim-publish-live.yml

feat(mlsysim): site release manifest + footer pill

2026-04-28 18:15:59 -04:00

mlsysim-pypi-publish.yml

ci(deps): bump softprops/action-gh-release from 2 to 3 (#1673)

2026-05-04 07:39:32 -04:00

mlsysim-update-pdfs.yml

fix(mlsysim): publish tutorial slides alongside the docs site

2026-04-27 17:27:48 -04:00

mlsysim-validate-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

publish-all-live.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

site-preview-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

site-publish-live.yml

fix(site): repair about page CSS + restructure newsletter sync

2026-04-28 19:26:52 -04:00

site-validate-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

slides-build-pdfs.yml

fix(slides): repair blank-pages and Vol1/Vol2 collision in release PDFs

2026-04-29 08:35:11 -04:00

slides-preview-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

slides-publish-live.yml

fix(slides): repair blank-pages and Vol1/Vol2 collision in release PDFs

2026-04-29 08:35:11 -04:00

slides-validate-dev.yml

fix(ci): gate sibling preview deploys on validate workflows passing

2026-05-01 13:25:27 -04:00

socratiq-bundle-drift.yml

ci(deps): bump actions/checkout from 4 to 6 (#1664)

2026-05-04 07:39:39 -04:00

staffml-audit-corpus-monthly.yml

feat(ci): staffml-audit-corpus-monthly.yml — recurring corpus audit workflow

2026-05-03 11:08:00 -04:00

staffml-auto-pr.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

staffml-chain-rebuild.yml

ci(staffml): Phase 4.6 — periodic chain rebuild workflow

2026-05-01 17:27:12 -04:00

staffml-preview-dev.yml

ci(staffml): trigger preview-dev on edits to its own + reusable workflows

2026-05-04 21:04:02 -04:00

staffml-publish-live.yml

refactor(vault-cli): rename --legacy-json to --local-json

2026-04-30 09:30:28 -04:00

staffml-update-paper.yml

refactor(vault-cli): rename --legacy-json to --local-json

2026-04-30 09:30:28 -04:00

staffml-validate-dev.yml

fix(ci): give staffml-validate-{dev,vault} distinct concurrency groups

2026-05-04 20:54:45 -04:00

staffml-validate-vault.yml

merge origin/dev into yaml-audit

2026-05-05 10:03:14 -04:00

staffml-welcome.yml

…

sync-newsletter.yml

Merge remote-tracking branch 'origin/dev' into dev

2026-04-28 19:39:35 -04:00

tinytorch-build-pdfs.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

tinytorch-preview-dev.yml

ci(deps): bump actions/upload-artifact from 4 to 7 (#1674)

2026-05-04 07:39:29 -04:00

tinytorch-publish-live.yml

feat(tinytorch): emit release manifest + footer pill

2026-04-28 18:08:52 -04:00

tinytorch-update-pdfs.yml

refactor(ci): use vars.NODE_VERSION + vars.PYTHON_VERSION

2026-04-28 18:56:47 -04:00

tinytorch-validate-dev.yml

…

update-contributors.yml

…