From da2be65abd30b3252383bb33e4e4b8d02fa8801c Mon Sep 17 00:00:00 2001
From: maziggy <mz@v8w.de>
Date: Thu, 26 Mar 2026 14:08:10 +0100
Subject: [PATCH] Housekeeping

---
 .github/workflows/ci.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ba25a2620..fe2d68a79 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -69,7 +69,10 @@ jobs:
           pip install pip-audit
 
       - name: Run pip-audit
-        run: pip-audit --desc on
+        run: |
+          # CVE-2026-4539: low-severity ReDoS in Pygments AdlLexer (indirect dep via mkdocs-material/pytest/rich).
+          # No fix available yet. Remove --ignore-vuln once Pygments releases a patched version.
+          pip-audit --desc on --ignore-vuln CVE-2026-4539
 
   backend-tests:
     name: Backend Tests