b963970f37
Add biome config and update dependencies
...
CI / test (18) (push) Has been cancelled
CI / test (20) (push) Has been cancelled
CI / test (22) (push) Has been cancelled
Build and Push to GHCR / Build and Push (push) Has been cancelled
Semgrep SAST / Semgrep security scan (push) Has been cancelled
Trivy Security Scan / Trivy vulnerability scan (push) Has been cancelled
Daily Data Freshness Check / check-updates (push) Has been cancelled
Daily Data Freshness Check / report (push) Has been cancelled
Drift Detection / drift-detect (push) Has been cancelled
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-13 16:54:21 +00:00
Mortalus
2da0164e8b
fix: resolve npm audit vulnerabilities (Hono CVEs)
...
Fixes high-severity Hono framework CVEs:
- GHSA-q5qw-h33p-qvwr (arbitrary file access via serveStatic)
- GHSA-5pq2-9x2x-5p6w (cookie attribute injection)
- GHSA-p6xx-57qc-3wxr (SSE control field injection)
2026-03-08 05:49:42 +01:00
Jeffrey von Rotz
de2982ea41
fix(security): update lock file — hono 4.12.3 + SDK 1.27.1 ( #4 )
...
Updated transitive deps to patched versions:
- @modelcontextprotocol/sdk: 1.26.0 -> 1.27.1
(cross-client data leak via shared transport, affects 1.10.0-1.25.3,
patched in 1.26.0)
- hono: 4.12.0 -> 4.12.3
(authentication bypass via IP spoofing, patched in 4.12.3)
No package.json change needed — existing semver ranges already allow
the patched versions.
2026-03-02 21:04:26 +01:00
Mortalus
2d38e78d02
feat: expand from 10 to 66 laws — 537 provisions, 10 Basic Law PDFs parsed
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-27 09:09:50 +01:00
Mortalus
1e28f8a6b1
feat: production MCP server with Israeli legislation (multi-source)
...
Complete production implementation with shell+adapter architecture,
13 MCP tools, SQLite FTS5 search, and multi-source ingestion pipeline.
Ingestion fetches from UCI mirror, UNODC SHERLOC PDFs, and Knesset
mobile PDFs (135 provisions, 33 definitions). 3 acts with full text,
7 acts metadata-only due to gov.il/nevo.co.il access restrictions.
Knesset OData API used for metadata enrichment.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-19 20:40:01 +01:00
