Nightly supply-chain audit failure — 6 consecutive nights since 2026-09-03

[github-actions]

Nightly supply-chain audit fired.

Failing for night 1 (first failure: 2026-09-03). Latest: 2026-09-03.

• Run: https://github.com/4DA-Systems/4DA/actions/runs/33744812748

cargo audit

exit code: 0

[src-tauri] clean
[relay] clean

cargo deny check

exit code: 0

───────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:120:13
    �[0m�[36m│�[0m
�[0m�[36m120�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0081�[0m", reason = "unic-char-property unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:121:13
    �[0m�[36m│�[0m
�[0m�[36m121�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0098�[0m", reason = "unic-ucd-version unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:122:13
    �[0m�[36m│�[0m
�[0m�[36m122�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0100�[0m", reason = "unic-ucd-ident unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:87:13
   �[0m�[36m│�[0m
�[0m�[36m87�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0097�[0m", reason = "rand unsound only with custom global allocator + rand::rng(), neither applies to 4DA" },
   �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
   �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
   �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:130:13
    �[0m�[36m│�[0m
�[0m�[36m130�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0173�[0m", reason = "proc-macro-error2 unmaintained; compile-time proc-macro only, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:136:13
    �[0m�[36m│�[0m
�[0m�[36m136�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0192�[0m", reason = "ttf-parser unmaintained; local font/glyph parsing only, no network input" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

advisories �[32mok�[0m, bans �[32mok�[0m, licenses �[32mok�[0m, sources �[32mok�[0m

pnpm audit (root --prod + sub-lockfiles, high+)

exit code: 1

[.] clean
[site] clean
[paddle-webhook] FAILED (exit 1):
      │ config>ajv>fast-uri                                    │
│                     │                                                        │
│                     │ .>vercel>@vercel/elysia>@vercel/static-                │
│                     │ config>ajv>fast-uri                                    │
│                     │                                                        │
│                     │ ... Found 21 paths, run `pnpm why fast-uri` for more   │
│                     │ information                                            │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ More info           │ https://github.com/advisories/GHSA-jqff-g426-hqxp      │
└─────────────────────┴────────────────────────────────────────────────────────┘
4 vulnerabilities found
Severity: 4 high
[mcp-4da-server] clean

[github-actions]

Nightly supply-chain audit fired.

Failing for night 1 (first failure: 2026-09-03). Latest: 2026-09-04.

• Run: https://github.com/4DA-Systems/4DA/actions/runs/33862891473

cargo audit

exit code: 0

[src-tauri] clean
[relay] clean

cargo deny check

exit code: 0

───────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:120:13
    �[0m�[36m│�[0m
�[0m�[36m120�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0081�[0m", reason = "unic-char-property unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:121:13
    �[0m�[36m│�[0m
�[0m�[36m121�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0098�[0m", reason = "unic-ucd-version unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:122:13
    �[0m�[36m│�[0m
�[0m�[36m122�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0100�[0m", reason = "unic-ucd-ident unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:87:13
   �[0m�[36m│�[0m
�[0m�[36m87�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0097�[0m", reason = "rand unsound only with custom global allocator + rand::rng(), neither applies to 4DA" },
   �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
   �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
   �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:130:13
    �[0m�[36m│�[0m
�[0m�[36m130�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0173�[0m", reason = "proc-macro-error2 unmaintained; compile-time proc-macro only, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:136:13
    �[0m�[36m│�[0m
�[0m�[36m136�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0192�[0m", reason = "ttf-parser unmaintained; local font/glyph parsing only, no network input" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

advisories �[32mok�[0m, bans �[32mok�[0m, licenses �[32mok�[0m, sources �[32mok�[0m

pnpm audit (root --prod + sub-lockfiles, high+)

exit code: 1

[.] clean
[site] clean
[paddle-webhook] FAILED (exit 1):
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.
[WARN] POST https://registry.npmjs.org/-/npm/v1/security/advisories/bulk error (23). Will retry in 10 seconds. 2 retries left.
[WARN] POST https://registry.npmjs.org/-/npm/v1/security/advisories/bulk error (23). Will retry in 1 minute. 1 retries left.
[23] The operation was aborted due to timeout

TimeoutError: The operation was aborted due to timeout
    at new DOMException (node:internal/per_context/domexception:76:18)
    at Timeout._onTimeout (node:internal/abort_controller:155:9)
    at listOnTimeout (node:internal/timers:585:17)
    at process.processTimers (node:internal/timers:521:7)
    at file:///opt/hostedtoolcache/node/22.23.2/x64/lib/node_modules/pnpm/dist/pnpm.mjs:86128:11
    at process.processTicksAndRejections (node:internal/process/task_queues:103:5)
    at async RetryOperation._fn (file:///opt/hostedtoolcache/node/22.23.2/x64/lib/node_modules/pnpm/dist/pnpm.mjs:86651:23)
[mcp-4da-server] clean

[github-actions]

Nightly supply-chain audit fired.

Failing for 2 CONSECUTIVE nights (first failure: 2026-09-03). Latest: 2026-09-15.

• Run: https://github.com/4DA-Systems/4DA/actions/runs/34960172286

cargo audit

exit code: 1

[src-tauri] FAILED (exit 1):
info: syncing channel updates for 1.95.0-x86_64-unknown-linux-gnu
info: latest update on 2026-04-16 for version 1.95.0 (59807616e 2026-04-14)
info: downloading 5 components
warn: the missing active toolchain `1.95.0-x86_64-unknown-linux-gnu` has been auto-installed
warn: this might cause rustup commands to take longer time to finish than expected
info: you may opt out with `RUSTUP_AUTO_INSTALL=0` or `rustup set auto-install disable`
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1246 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (910 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.40
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!
[relay] FAILED (exit 1):
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1246 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (297 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.37
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!

cargo deny check

exit code: 1

��─────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:120:13
    �[0m�[36m│�[0m
�[0m�[36m120�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0081�[0m", reason = "unic-char-property unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:121:13
    �[0m�[36m│�[0m
�[0m�[36m121�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0098�[0m", reason = "unic-ucd-version unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:122:13
    �[0m�[36m│�[0m
�[0m�[36m122�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0100�[0m", reason = "unic-ucd-ident unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:87:13
   �[0m�[36m│�[0m
�[0m�[36m87�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0097�[0m", reason = "rand unsound only with custom global allocator + rand::rng(), neither applies to 4DA" },
   �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
   �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
   �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:130:13
    �[0m�[36m│�[0m
�[0m�[36m130�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0173�[0m", reason = "proc-macro-error2 unmaintained; compile-time proc-macro only, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:136:13
    �[0m�[36m│�[0m
�[0m�[36m136�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0192�[0m", reason = "ttf-parser unmaintained; local font/glyph parsing only, no network input" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

advisories �[31mFAILED�[0m, bans �[32mok�[0m, licenses �[32mok�[0m, sources �[32mok�[0m

dependency audit (every tracked lockfile, high+)

exit code: 0

=== npm audit editors/vscode/4da — exit 0 ===
found 0 vulnerabilities

=== pnpm audit mcp-4da-server — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.onlyBuiltDependencies", "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== npm audit mcp-memory-server — exit 0 ===
found 0 vulnerabilities

=== pnpm audit paddle-webhook — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit . (--prod) — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides", "pnpm.patchedDependencies". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit site — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

[audit-lockfiles] 6 tracked lockfile(s) audited at --audit-level=high: editors/vscode/4da (npm), mcp-4da-server (pnpm), mcp-memory-server (npm), paddle-webhook (pnpm), . (pnpm), site (pnpm)
[audit-lockfiles] all clean at --audit-level=high.

[github-actions]

Nightly supply-chain audit fired.

Failing for 3 CONSECUTIVE nights (first failure: 2026-09-03). Latest: 2026-09-16.

This is not a new alert. The audit has been red every night since 2026-09-03 and nothing has been merged to fix it.

• Run: https://github.com/4DA-Systems/4DA/actions/runs/35086233568

cargo audit

exit code: 1

[src-tauri] FAILED (exit 1):
info: syncing channel updates for 1.95.0-x86_64-unknown-linux-gnu
info: latest update on 2026-04-16 for version 1.95.0 (59807616e 2026-04-14)
info: downloading 5 components
warn: the missing active toolchain `1.95.0-x86_64-unknown-linux-gnu` has been auto-installed
warn: this might cause rustup commands to take longer time to finish than expected
info: you may opt out with `RUSTUP_AUTO_INSTALL=0` or `rustup set auto-install disable`
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1246 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (910 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.40
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!
[relay] FAILED (exit 1):
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1246 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (297 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.37
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!

cargo deny check

exit code: 1

��─────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:120:13
    �[0m�[36m│�[0m
�[0m�[36m120�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0081�[0m", reason = "unic-char-property unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:121:13
    �[0m�[36m│�[0m
�[0m�[36m121�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0098�[0m", reason = "unic-ucd-version unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:122:13
    �[0m�[36m│�[0m
�[0m�[36m122�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0100�[0m", reason = "unic-ucd-ident unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:87:13
   �[0m�[36m│�[0m
�[0m�[36m87�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0097�[0m", reason = "rand unsound only with custom global allocator + rand::rng(), neither applies to 4DA" },
   �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
   �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
   �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:130:13
    �[0m�[36m│�[0m
�[0m�[36m130�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0173�[0m", reason = "proc-macro-error2 unmaintained; compile-time proc-macro only, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:136:13
    �[0m�[36m│�[0m
�[0m�[36m136�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0192�[0m", reason = "ttf-parser unmaintained; local font/glyph parsing only, no network input" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

advisories �[31mFAILED�[0m, bans �[32mok�[0m, licenses �[32mok�[0m, sources �[32mok�[0m

dependency audit (every tracked lockfile, high+)

exit code: 0

=== npm audit editors/vscode/4da — exit 0 ===
found 0 vulnerabilities

=== pnpm audit mcp-4da-server — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.onlyBuiltDependencies", "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== npm audit mcp-memory-server — exit 0 ===
found 0 vulnerabilities

=== pnpm audit paddle-webhook — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit . (--prod) — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides", "pnpm.patchedDependencies". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit site — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

[audit-lockfiles] 6 tracked lockfile(s) audited at --audit-level=high: editors/vscode/4da (npm), mcp-4da-server (pnpm), mcp-memory-server (npm), paddle-webhook (pnpm), . (pnpm), site (pnpm)
[audit-lockfiles] all clean at --audit-level=high.

[github-actions]

Nightly supply-chain audit fired.

Failing for 4 CONSECUTIVE nights (first failure: 2026-09-03). Latest: 2026-09-17.

This is not a new alert. The audit has been red every night since 2026-09-03 and nothing has been merged to fix it.

• Run: https://github.com/4DA-Systems/4DA/actions/runs/35212407222

cargo audit

exit code: 1

[src-tauri] FAILED (exit 1):
info: syncing channel updates for 1.95.0-x86_64-unknown-linux-gnu
info: latest update on 2026-04-16 for version 1.95.0 (59807616e 2026-04-14)
info: downloading 5 components
warn: the missing active toolchain `1.95.0-x86_64-unknown-linux-gnu` has been auto-installed
warn: this might cause rustup commands to take longer time to finish than expected
info: you may opt out with `RUSTUP_AUTO_INSTALL=0` or `rustup set auto-install disable`
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1247 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (910 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.40
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!
[relay] FAILED (exit 1):
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1247 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (297 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.37
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!

cargo deny check

exit code: 1

��─────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:120:13
    �[0m�[36m│�[0m
�[0m�[36m120�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0081�[0m", reason = "unic-char-property unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:121:13
    �[0m�[36m│�[0m
�[0m�[36m121�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0098�[0m", reason = "unic-ucd-version unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:122:13
    �[0m�[36m│�[0m
�[0m�[36m122�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0100�[0m", reason = "unic-ucd-ident unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:87:13
   �[0m�[36m│�[0m
�[0m�[36m87�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0097�[0m", reason = "rand unsound only with custom global allocator + rand::rng(), neither applies to 4DA" },
   �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
   �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
   �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:130:13
    �[0m�[36m│�[0m
�[0m�[36m130�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0173�[0m", reason = "proc-macro-error2 unmaintained; compile-time proc-macro only, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:136:13
    �[0m�[36m│�[0m
�[0m�[36m136�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0192�[0m", reason = "ttf-parser unmaintained; local font/glyph parsing only, no network input" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

advisories �[31mFAILED�[0m, bans �[32mok�[0m, licenses �[32mok�[0m, sources �[32mok�[0m

dependency audit (every tracked lockfile, high+)

exit code: 0

=== npm audit editors/vscode/4da — exit 0 ===
found 0 vulnerabilities

=== pnpm audit mcp-4da-server — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.onlyBuiltDependencies", "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== npm audit mcp-memory-server — exit 0 ===
found 0 vulnerabilities

=== pnpm audit paddle-webhook — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit . (--prod) — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides", "pnpm.patchedDependencies". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit site — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

[audit-lockfiles] 6 tracked lockfile(s) audited at --audit-level=high: editors/vscode/4da (npm), mcp-4da-server (pnpm), mcp-memory-server (npm), paddle-webhook (pnpm), . (pnpm), site (pnpm)
[audit-lockfiles] all clean at --audit-level=high.

[github-actions]

Nightly supply-chain audit fired.

Failing for 5 CONSECUTIVE nights (first failure: 2026-09-03). Latest: 2026-09-18.

This is not a new alert. The audit has been red every night since 2026-09-03 and nothing has been merged to fix it.

• Run: https://github.com/4DA-Systems/4DA/actions/runs/35334494581

cargo audit

exit code: 1

[src-tauri] FAILED (exit 1):
info: syncing channel updates for 1.95.0-x86_64-unknown-linux-gnu
info: latest update on 2026-04-16 for version 1.95.0 (59807616e 2026-04-14)
info: downloading 5 components
warn: the missing active toolchain `1.95.0-x86_64-unknown-linux-gnu` has been auto-installed
warn: this might cause rustup commands to take longer time to finish than expected
info: you may opt out with `RUSTUP_AUTO_INSTALL=0` or `rustup set auto-install disable`
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1251 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (910 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.40
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!
[relay] FAILED (exit 1):
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1251 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (297 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.37
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!

cargo deny check

exit code: 1

��─────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:120:13
    �[0m�[36m│�[0m
�[0m�[36m120�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0081�[0m", reason = "unic-char-property unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:121:13
    �[0m�[36m│�[0m
�[0m�[36m121�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0098�[0m", reason = "unic-ucd-version unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:122:13
    �[0m�[36m│�[0m
�[0m�[36m122�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0100�[0m", reason = "unic-ucd-ident unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:87:13
   �[0m�[36m│�[0m
�[0m�[36m87�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0097�[0m", reason = "rand unsound only with custom global allocator + rand::rng(), neither applies to 4DA" },
   �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
   �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
   �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:130:13
    �[0m�[36m│�[0m
�[0m�[36m130�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0173�[0m", reason = "proc-macro-error2 unmaintained; compile-time proc-macro only, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:136:13
    �[0m�[36m│�[0m
�[0m�[36m136�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0192�[0m", reason = "ttf-parser unmaintained; local font/glyph parsing only, no network input" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

advisories �[31mFAILED�[0m, bans �[32mok�[0m, licenses �[32mok�[0m, sources �[32mok�[0m

dependency audit (every tracked lockfile, high+)

exit code: 0

=== npm audit editors/vscode/4da — exit 0 ===
found 0 vulnerabilities

=== pnpm audit mcp-4da-server — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.onlyBuiltDependencies", "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== npm audit mcp-memory-server — exit 0 ===
found 0 vulnerabilities

=== pnpm audit paddle-webhook — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit . (--prod) — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides", "pnpm.patchedDependencies". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit site — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

[audit-lockfiles] 6 tracked lockfile(s) audited at --audit-level=high: editors/vscode/4da (npm), mcp-4da-server (pnpm), mcp-memory-server (npm), paddle-webhook (pnpm), . (pnpm), site (pnpm)
[audit-lockfiles] all clean at --audit-level=high.

[github-actions]

Nightly supply-chain audit fired.

Failing for 6 CONSECUTIVE nights (first failure: 2026-09-03). Latest: 2026-09-19.

This is not a new alert. The audit has been red every night since 2026-09-03 and nothing has been merged to fix it.

• Run: https://github.com/4DA-Systems/4DA/actions/runs/35436577367

cargo audit

exit code: 1

[src-tauri] FAILED (exit 1):
info: syncing channel updates for 1.95.0-x86_64-unknown-linux-gnu
info: latest update on 2026-04-16 for version 1.95.0 (59807616e 2026-04-14)
info: downloading 5 components
warn: the missing active toolchain `1.95.0-x86_64-unknown-linux-gnu` has been auto-installed
warn: this might cause rustup commands to take longer time to finish than expected
info: you may opt out with `RUSTUP_AUTO_INSTALL=0` or `rustup set auto-install disable`
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1251 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (910 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.40
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!
[relay] FAILED (exit 1):
�[0m�[0m�[1m�[32m    Fetching�[0m advisory database from `https://github.com/RustSec/advisory-db.git`
�[0m�[0m�[1m�[32m      Loaded�[0m 1251 security advisories (from /home/runner/.cargo/advisory-db)
�[0m�[0m�[1m�[32m    Updating�[0m crates.io index
�[0m�[0m�[1m�[32m    Scanning�[0m Cargo.lock for vulnerabilities (297 crate dependencies)
�[0m�[0m�[1m�[31mCrate:    �[0m rustls
�[0m�[0m�[1m�[31mVersion:  �[0m 0.23.37
�[0m�[0m�[1m�[31mTitle:    �[0m TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
�[0m�[0m�[1m�[31mDate:     �[0m 2026-09-14
�[0m�[0m�[1m�[31mID:       �[0m RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mURL:      �[0m https://rustsec.org/advisories/RUSTSEC-2026-0285
�[0m�[0m�[1m�[31mSeverity: �[0m 5.3 (medium)
�[0m�[0m�[1m�[31mSolution: �[0m Upgrade to >=0.23.45

�[0m�[0m�[1m�[31merror:�[0m 1 vulnerability found!

cargo deny check

exit code: 1

��─────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:120:13
    �[0m�[36m│�[0m
�[0m�[36m120�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0081�[0m", reason = "unic-char-property unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:121:13
    �[0m�[36m│�[0m
�[0m�[36m121�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0098�[0m", reason = "unic-ucd-version unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:122:13
    �[0m�[36m│�[0m
�[0m�[36m122�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2025-0100�[0m", reason = "unic-ucd-ident unmaintained; build-time transitive via tauri-build, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m──────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
   �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:87:13
   �[0m�[36m│�[0m
�[0m�[36m87�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0097�[0m", reason = "rand unsound only with custom global allocator + rand::rng(), neither applies to 4DA" },
   �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
   �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
   �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:130:13
    �[0m�[36m│�[0m
�[0m�[36m130�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0173�[0m", reason = "proc-macro-error2 unmaintained; compile-time proc-macro only, no runtime surface" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

�[0m�[1m�[38;5;11mwarning[advisory-not-detected]�[0m�[1m: advisory was not encountered�[0m
    �[0m�[36m┌─�[0m /home/runner/work/4DA/4DA/src-tauri/deny.toml:136:13
    �[0m�[36m│�[0m
�[0m�[36m136�[0m �[0m�[36m│�[0m     { id = "�[0m�[33mRUSTSEC-2026-0192�[0m", reason = "ttf-parser unmaintained; local font/glyph parsing only, no network input" },
    �[0m�[36m│�[0m             �[0m�[33m━━━━━━━━━━━━━━━━━�[0m             �[0m�[36m────────────────────────────────────────────────────────────────────────�[0m �[0m�[36mignore reason�[0m
    �[0m�[36m│�[0m             �[0m�[33m│�[0m                              
    �[0m�[36m│�[0m             �[0m�[33mno crate matched advisory criteria�[0m

advisories �[31mFAILED�[0m, bans �[32mok�[0m, licenses �[32mok�[0m, sources �[32mok�[0m

dependency audit (every tracked lockfile, high+)

exit code: 0

=== npm audit editors/vscode/4da — exit 0 ===
found 0 vulnerabilities

=== pnpm audit mcp-4da-server — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.onlyBuiltDependencies", "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== npm audit mcp-memory-server — exit 0 ===
found 0 vulnerabilities

=== pnpm audit paddle-webhook — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit . (--prod) — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides", "pnpm.patchedDependencies". See https://pnpm.io/settings for the new home of each setting.

=== pnpm audit site — exit 0 ===
No known vulnerabilities found
[WARN] The "pnpm" field in package.json is no longer read by pnpm. The following keys were ignored: "pnpm.overrides". See https://pnpm.io/settings for the new home of each setting.

[audit-lockfiles] 6 tracked lockfile(s) audited at --audit-level=high: editors/vscode/4da (npm), mcp-4da-server (pnpm), mcp-memory-server (npm), paddle-webhook (pnpm), . (pnpm), site (pnpm)
[audit-lockfiles] all clean at --audit-level=high.