mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-09-30 11:12:35 +02:00
The GitHub runner's Python toolcache ships setuptools 79.0.1, which pip-audit flags for PYSEC-2026-3447 (fixed in 83.0.0), failing the blocking Backend Security job. A fix version exists, so upgrade setuptools in the install step rather than --ignore-vuln. Applied to both ci.yml (blocking) and security.yml (scheduled scan).