Security hardening: pin Python deps, normalize Go versions, add SECURITY.md and security CI#1

Closed

nevinshine with Copilot wants to merge 3 commits into

mainfrom

copilot/harden-repository-security

Commits on Apr 10, 2026

Initial plan
Copilot
authored
Security hardening: pin Python deps, normalize Go versions, add SECURITY.md and security CI workflow

Copilot
and
nevinshine
authored
Fix protobuf CVE: bump to 5.29.6 (patches DoS and JSON recursion depth bypass)

Copilot
and
nevinshine
authored