CodeQL Security Analysis

Workflow runs for CodeQL Security Analysis

• fix(codex): recover v2 sub-agent tool calls

  completed successfully:
  CodeQL Security Analysis#885:Pull request#227synchronizebycostin-uipath
  fix/codex-subagent-activity-spawn

  Oct 17, 20264m 30s
  More actions for workflow run 885

• chore(deps): bump the npm-all group across 1 directory with 19 updates

  completed successfully:
  CodeQL Security Analysis#884:Pull request#210synchronizebydependabot[bot]Bot
  dependabot/npm_and_yarn/evalboard/npm-all-13c7849de9

  Oct 16, 20262m 48s
  More actions for workflow run 884

• fix(deps): bump next to 15.5.28 (Next.js security update, Oct 14 2026…

  completed successfully:
  CodeQL Security Analysis#883:Commit872f857pushedbybai-uipath
  main

  Oct 16, 20264m 3s
  More actions for workflow run 883

• fix(deps): bump next to 15.5.28 (Next.js security update, Oct 14 2026)

  completed successfully:
  CodeQL Security Analysis#882:Pull request#226synchronizebybai-uipath
  security/nextjs-cve-oct-2026

  Oct 16, 20263m 47s
  More actions for workflow run 882

• chore(deps): bump oauthlib from 3.3.1 to 4.0.0

  completed successfully:
  CodeQL Security Analysis#881:Pull request#208synchronizebydependabot[bot]Bot
  dependabot/uv/oauthlib-4.0.0

  Oct 16, 20262m 45s
  More actions for workflow run 881

• fix(deps): bump mcp 1.28.1 -> 1.30.0 for CVE-2026-59951 (#228)

  completed successfully:
  CodeQL Security Analysis#880:Commitea0e436pushedbycostin-uipath
  main

  Oct 16, 20262m 54s
  More actions for workflow run 880

• chore(deps): bump next from 15.5.22 to 15.5.27 in /evalboard

  completed successfully:
  CodeQL Security Analysis#879:Pull request#229openedbydependabot[bot]Bot
  dependabot/npm_and_yarn/evalboard/next-15.5.27

  Oct 16, 20264m 4s
  More actions for workflow run 879

• fix(deps): bump mcp 1.28.1 -> 1.30.0 for CVE-2026-59951

  completed successfully:
  CodeQL Security Analysis#878:Pull request#228openedbycostin-uipath
  fix/mcp-cve-2026-59951

  Oct 16, 20262m 36s
  More actions for workflow run 878

• fix(codex): recover v2 sub-agent tool calls

  completed successfully:
  CodeQL Security Analysis#877:Pull request#227openedbycostin-uipath
  fix/codex-subagent-activity-spawn

  Oct 16, 20263m 53s
  More actions for workflow run 877

• fix(deps): bump next to 15.5.28 (Next.js security update, Oct 14 2026)

  completed successfully:
  CodeQL Security Analysis#876:Pull request#226openedbycosminraduUPTH
  security/nextjs-cve-oct-2026

  Oct 16, 20263m 14s
  More actions for workflow run 876

• chore(deps): bump oauthlib from 3.3.1 to 4.0.0

  completed successfully:
  CodeQL Security Analysis#875:Pull request#208synchronizebydependabot[bot]Bot
  dependabot/uv/oauthlib-4.0.0

  Oct 15, 20264m 30s
  More actions for workflow run 875

• fix(codex): copy skills into .agents/skills instead of symlinking (#225)

  completed successfully:
  CodeQL Security Analysis#874:Commit1895a2cpushedbybai-uipath
  main

  Oct 15, 20263m 50s
  More actions for workflow run 874

• fix(codex): copy skills into .agents/skills instead of symlinking

  completed successfully:
  CodeQL Security Analysis#873:Pull request#225synchronizebybai-uipath
  bai/codex-copy-skills

  Oct 15, 20263m 52s
  More actions for workflow run 873

• fix(codex): copy skills into .agents/skills instead of symlinking

  completed successfully:
  CodeQL Security Analysis#872:Pull request#225synchronizebybai-uipath
  bai/codex-copy-skills

  Oct 15, 20263m 54s
  More actions for workflow run 872

• fix(codex): copy skills into .agents/skills instead of symlinking

  completed successfully:
  CodeQL Security Analysis#871:Pull request#225openedbybai-uipath
  bai/codex-copy-skills

  Oct 15, 20262m 31s
  More actions for workflow run 871

• fix(agents): grade Delegate's Windows PowerShell tool as Bash

  completed successfully:
  CodeQL Security Analysis#870:Pull request#224openedbyMihaiii
  fix/delegate-powershell-shell-tool

  Oct 15, 20264m 18s
  More actions for workflow run 870

• fix(pricing): price Delegate's underscored model ids and flag unpriced judge/simulator cost

  completed successfully:
  CodeQL Security Analysis#869:Pull request#223synchronizebyakshaylive
  abhiram/fix/delegate-underscore-model-pricing

  Oct 13, 20264m 0s
  More actions for workflow run 869

• chore(deps): bump oauthlib from 3.3.1 to 4.0.0

  completed successfully:
  CodeQL Security Analysis#868:Pull request#208synchronizebydependabot[bot]Bot
  dependabot/uv/oauthlib-4.0.0

  Oct 13, 20264m 12s
  More actions for workflow run 868

• fix(pricing): price Delegate's underscored model ids and flag unpriced judge/simulator cost

  completed successfully:
  CodeQL Security Analysis#867:Pull request#223synchronizebyakshaylive
  abhiram/fix/delegate-underscore-model-pricing

  Oct 13, 20263m 47s
  More actions for workflow run 867

• fix(agents): count Delegate batched tool calls once under max_turns a…

  completed successfully:
  CodeQL Security Analysis#866:Commitdb2067epushedbyakshaylive
  main

  Oct 13, 20264m 8s
  More actions for workflow run 866

• fix(agents): count Delegate batched tool calls once under max_turns and stamp turns off one TurnClock

  completed successfully:
  CodeQL Security Analysis#865:Pull request#222synchronizebyabhiram-vad
  abhiram/fix/delegate-max-turns-batched-tools

  Oct 12, 20263m 17s
  More actions for workflow run 865

• fix(agents): count Delegate batched tool calls once under max_turns and stamp turns off one TurnClock

  completed successfully:
  CodeQL Security Analysis#864:Pull request#222synchronizebyabhiram-vad
  abhiram/fix/delegate-max-turns-batched-tools

  Oct 12, 20264m 9s
  More actions for workflow run 864

• fix(agents): count Delegate batched tool calls once under max_turns and stamp turns off one TurnClock

  completed successfully:
  CodeQL Security Analysis#863:Pull request#222synchronizebyabhiram-vad
  abhiram/fix/delegate-max-turns-batched-tools

  Oct 12, 20263m 20s
  More actions for workflow run 863

• fix(pricing): price Delegate's underscored model ids and flag unpriced judge/simulator cost

  completed successfully:
  CodeQL Security Analysis#862:Pull request#223synchronizebyabhiram-vad
  abhiram/fix/delegate-underscore-model-pricing

  Oct 12, 20262m 24s
  More actions for workflow run 862

• fix(pricing): price Delegate's underscored model ids and flag unpriced judge/simulator cost

  completed successfully:
  CodeQL Security Analysis#860:Pull request#223synchronizebyabhiram-vad
  abhiram/fix/delegate-underscore-model-pricing

  Oct 12, 20262m 43s
  More actions for workflow run 860