v1.3.4 - Dependency updates, CI Health & Security patches

[neverinfamous]

v1.3.4

Highlights

• Dependency Updates: Secured all NPM dependencies to their latest compatible versions, resolving multiple Dependabot CVEs without manual intervention.
• Documentation Refinements: Synched platform limits to comply with Docker Hub validation lengths and included an environment setup template.
• CI Health Improvements: Updated Docker actions to Node 24 runtimes ahead of deprecation, pinned security actions, and added Dependabot support for Docker base images.

CI/CD

• CI Health: Updated Docker actions (docker/build-push-action@v7, setup-buildx-action@v4, login-action@v4, metadata-action@v6) to native Node 24 runtimes to comply with the upcoming June 2026 deprecation deadline.
• CI Health: Pinned trufflesecurity/trufflehog to exact version @v3.94.2 to avoid floating reference risks.
• CI Health: Added docker package ecosystem to Dependabot configuration to receive base image updates.
• Workflows: Removed failing agentic maintenance workflows (docs drift, dependency maintenance, ci health, agentics-maintenance) to prevent CI pipeline blocking.

Documentation

• Doc Audit: Refined repository documentation, fixed Docker Hub character limits on DOCKER_README.md, and created .env.example.

Changed

• Dependency Updates: Updated npm dependencies to their latest wanted/latest compatible versions.

Security

• Dependabot: Fixed Prototype Pollution via parse() in NodeJS flatted.
• Dependabot: Fixed a malicious WebSocket 64-bit length handling issue in Undici that could overflow the parser and crash the client.
• Dependabot: Fixed an HTTP Request/Response Smuggling issue in Undici.
• Dependabot: Fixed a CRLF injection issue in undici via the upgrade option.
• Dependabot: Fixed incorrect glob matching in picomatch caused by method injection in POSIX character classes.

---

Compare: v1.3.3...v1.3.4

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	do-manager	02517ff	Apr 06 2026, 12:48 PM