cordum Files

What's Changed

• build(deps): bump golangci/golangci-lint-action from 7.0.1 to 9.2.1 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/330
• build(deps): bump sigstore/cosign-installer from 3.9.1 to 4.1.2 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/334
• [bug] scheduler: route critical-section state writes through the lock-fence context (CRD-14, task-7754adfb) by @yaront1111 in https://github.com/cordum-io/cordum/pull/339
• [bug] audit: drain buffered exporter with a fresh bounded context on Close (CRD-13, task-bdce8197) by @yaront1111 in https://github.com/cordum-io/cordum/pull/337
• build(deps): bump docker/metadata-action from 5.10.0 to 6.1.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/331
• build(deps): bump docker/login-action from 3.7.0 to 4.2.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/332
• build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/333
• ci: run full CI and CodeQL on stacked moe/** pull requests by @yaront1111 in https://github.com/cordum-io/cordum/pull/340
• feat(auth): service-token layer + epic-9cea9be1 deliverables by @yaront1111 in https://github.com/cordum-io/cordum/pull/341
• [bug] gateway: enforce tenant scoping on MCP approval resolve (CRD-2, task-e1ced77c) by @yaront1111 in https://github.com/cordum-io/cordum/pull/336
• [bug] safetykernel: fail closed on unreadable result pointer in gRPC CheckOutput (CRD-3, task-74a83bec) by @yaront1111 in https://github.com/cordum-io/cordum/pull/335
• feat(edge): move Edge approvals from session drawer to Approvals page by @yaront1111 in https://github.com/cordum-io/cordum/pull/342
• build(deps-dev): bump vite from 8.0.5 to 8.0.16 in /dashboard by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/348
• test(gateway): fix shadow-exception expiry time-bomb breaking Test (1.25) by @yaront1111 in https://github.com/cordum-io/cordum/pull/361
• build(deps): bump aquasecurity/trivy-action from [a9c7b0] to [ed142f] by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/344
• build(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/346
• build(deps): bump actions/github-script from 7 to 9 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/345
• build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/343
• build(deps-dev): bump vite from 8.0.9 to 8.0.16 in /sdk/typescript by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/349
• build(deps): bump azure/setup-helm from 4.3.1 to 5.0.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/347
• feat(infra): add Dependabot config for Go modules and dashboard npm dependencies by @cschanhniem in https://github.com/cordum-io/cordum/pull/353
• build(deps): bump peter-evans/find-comment from 3.1.0 to 4.0.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/369
• build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/367
• build(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/365
• build(deps): bump pnpm/action-setup from 4.3.0 to 6.0.9 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/364
• build(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/374
• build(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/366
• build(deps): bump golang.org/x/net from 0.52.0 to 0.55.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/377
• build(deps): bump js-yaml and @redocly/openapi-core in /sdk/typescript by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/378
• fix(ci): recover Cordum scheduled and PR workflows by @bigboycoder1 in https://github.com/cordum-io/cordum/pull/382
• build(deps): bump lycheeverse/lychee-action from 2.8.0 to 2.9.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/387
• build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/386
• build(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/384
• build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/383
• [security] enforce authenticated worker session handshake (task-a4b71af702e24832903583076881447d) by @bigboycoder1 in https://github.com/cordum-io/cordum/pull/389
• [security] Replace fabricated maturity claims with verified reporting policy by @yaront1111 in https://github.com/cordum-io/cordum/pull/381
• build(deps): bump the dashboard-deps group across 1 directory with 48 updates by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/388
• build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.1 by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/385
• build(deps): bump golang.org/x/crypto from 0.49.0 to 0.52.0 in /sdk by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/379
• fix(deps): repin cap/v2 off a deleted commit — restores clean builds by @yaront1111 in https://github.com/cordum-io/cordum/pull/392
• feat(copilot): govern GitHub Copilot (VS Code agent mode) via MCP + record audit sessions by @yaront1111 in https://github.com/cordum-io/cordum/pull/370
• chore(ci): bump pinned Go toolchain to 1.26.x by @bigboycoder1 in https://github.com/cordum-io/cordum/pull/380
• Moe/epic 8c29308d/task 5e027c46 by @yaront1111 in https://github.com/cordum-io/cordum/pull/391
• epic(edge/audit/telemetry): task-7754adfb checkpoint — EDGE-074 policy mechanism + telemetry pings + audit log UI by @yaront1111 in https://github.com/cordum-io/cordum/pull/363
• feat(edge): govern every Copilot chat turn via LLM-proxy ingest (Phase 2) by @yaront1111 in https://github.com/cordum-io/cordum/pull/372
• [security] enforce authenticated worker session handshake (task-a4b71af702e24832903583076881447d) by @yaront1111 in https://github.com/cordum-io/cordum/pull/390
• feat(edge): govern GitHub Copilot via agent hooks — every chat + every action by @yaront1111 in https://github.com/cordum-io/cordum/pull/371
• fix(security): cross-tenant MCP identity, delegation/throttle fail-open, policy verifier, CVEs by @yaront1111 in https://github.com/cordum-io/cordum/pull/362
• build(deps): bump the go-deps group across 1 directory with 22 updates by @dependabot[bot] in https://github.com/cordum-io/cordum/pull/393

New Contributors

• @cschanhniem made their first contribution in https://github.com/cordum-io/cordum/pull/353

Full Changelog: https://github.com/cordum-io/cordum/compare/v1.1.0...v1.2.0