Record the mimosa advisory triage #117

Merged
weichen merged 6 commits from fix/mimosa-triage into main 2026-10-01 05:31:41 +00:00
6 Commits
Author SHA1 Message Date
weichen 54e8433ecb Record the sync checkpoint
ci / test (pull_request) Failing after 2m18s
2026-10-01 05:31:23 +00:00
weichen 3584792eb1 Merge remote-tracking branch 'origin/main' into fix/mimosa-triage
Co-authored-by: Cursor <cursoragent@cursor.com>

# Conflicts:
#	.task/feature-duplication-lesson-records.md
2026-10-01 05:31:21 +00:00
weichenandCursor 4cf76f1198 Record the mimosa triage pull request link
ci / test (pull_request) Failing after 1m58s
Why: The task card still pointed at a placeholder after the pull request was opened.
Evidence: Dev #117 is the record for this triage. The card itself is the only change.
Impact: Reviewers can open the record from the card. No runtime change.
Refs: https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/117
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-01 04:51:19 +00:00
weichen 037270c62a Record the sync checkpoint
ci / test (pull_request) Failing after 1m34s
2026-10-01 04:50:27 +00:00
weichenandCursor 0ed945956a Record the mimosa advisory triage
Why: The local scan ledger needed an explicit keep-or-drop decision before this batch closed.
Evidence: Twelve local reports dedupe to command-injection gate events with an empty file field, plus two caret-range notes on @types/node. Neither has a local fix that is both clear and narrow.
Impact: Task card only. No product code and no dependency pin.
Refs: Backend #33, Dev #113, Dev #96
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-01 04:50:21 +00:00
weichen 68e5a2117d Record the task card for fix-mimosa-triage 2026-10-01 04:48:32 +00:00