Repository navigation

[fix/nanoid-osv-supply-chain] Bump postcss + run Supply Chain scan daily with Slack alerting - #670

Merged

NiveditJain merged 7 commits into

mainfrom

fix/nanoid-osv-supply-chain

Aug 10, 2026

Merged

[fix/nanoid-osv-supply-chain] Bump postcss + run Supply Chain scan daily with Slack alerting#670
NiveditJain merged 7 commits into
mainfrom
fix/nanoid-osv-supply-chain

Commits on Aug 10, 2026
- fix: bump postcss override to clear nanoid OSV advisory
  
  NiveditJain
  and
  claude
  committed
  03ef397
- docs: date the changelog entry under today's date, not beta.13's original date
  
  NiveditJain
  and
  claude
  committed
  eac91f0
- docs: fill in changelog PR number
  
  NiveditJain
  and
  claude
  committed
  a295f95
- ci: run Supply Chain scan daily, alert Slack on scheduled failure
  
  NiveditJain
  and
  claude
  committed
  0467c4e
- docs: reflect the daily schedule + Slack alert in SECURITY.md
  
  NiveditJain
  and
  claude
  committed
  f43bc85
- fix: gate Slack alert on schedule runs only, not push
  
  NiveditJain
  and
  claude
  committed
  6f4a19e
- fix: notify step never fired, and a broken webhook failed silently
  
  NiveditJain
  and
  claude
  committed
  a691442