chore(deps): bump smol-toml and @openai/codex-security

[dependabot]

Bumps smol-toml to 1.8.0 and updates ancestor dependency @openai/codex-security. These dependencies need to be updated together.

Updates smol-toml from 1.6.1 to 1.8.0

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

• feat: stringify temporal objects by @​Gouvernathor and @​cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

• refactor: improve performance of the parser by @​cyyynthia
• chore: revert sourcemap publishing by @​cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

⚠️ Includes a fix for GHSA-7w5x-hrqm-74c2

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

v1.7.0

This version slightly changes the behaviour of stringify: integers beyond the safe range are always emitted as float numbers.

String decode logic has been rewritten, it is a bit faster now and uses a single-pass approach instead of a dual-pass approach as it did previously. The code should be a bit smaller too, though I didn't actually measure that.

The package is now published with source-maps, declaration-maps, and a copy of the original TypeScript source files. This will improve your DX if you're like me and like Ctrl+Click'ing things a lot. ;)

What's Changed

• improve performance of the string decode logic by @​cyyynthia
• fix(stringify): emit integer-valued numbers beyond the safe-integer range as floats by @​spokodev in squirrelchat/smol-toml#56
• publish source-maps, declaration-maps, and original source files by @​cyyynthia
• miscellaneous repository maintenance tasks by @​cyyynthia

New Contributors

• @​spokodev made their first contribution in squirrelchat/smol-toml#56

Full Changelog: squirrelchat/smol-toml@v1.6.1...v1.7.0

Commits

• 6d0f477 chore: bump version
• 97e9713 docs: mention temporal api
• 7a3068d perf: ubench opt for instanceof Date
• 7e8c09a feat: stringify temporal
• 19239d0 chore: bump version
• 5f55c3a chore: revert sourcemap publishing
• 5c26f1b chore: update benchmarks
• 92832d2 refactor: better logic orchestration in structs
• 2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
• e6017c4 ci: use staged publish
• Additional commits viewable in compare view

Updates @openai/codex-security from 0.1.18 to 0.1.29

Release notes

Sourced from @​openai/codex-security's releases.

Codex Security 0.1.29

Highlights

• stream large saved scan JSON output (#932)
• prefer complete saved rollout copies (#933)
• support custom patch validation prompts (#940)
• bump @​opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory (#936)
• bump @​linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript (#937)
• seal drafts with empty artifact lists (#941)
• include Terraform files in scan inventories (#944)
• run README CLI commands with npx (#945)
• resolve Git metadata outside its config (#935)
• redirect findings service root to dashboard (#948)
• bound source preview reads (#947)
• align filter controls and dropdown carets (#949)
• match filter control borders (#957)
• make dashboard tables sortable (#958)
• bump @​linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript (#955)
• tolerate transient setup failures and slow Windows runners (#953)
• reject line breaks in inventory paths. (#961)
• bump the third-party group across 3 directories with 7 updates (#954)
• keep model-authored runtime status out of finalized reports (#703)
• show progress while patching findings (#931)
• deduplicate string-form openQuestions in merge_saved_results (#951)
• emit structured JSON errors for failed scans (#709)
• preserve undecided findings after model refusals (#960)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

What's Changed

Features

• feat(cli): support custom patch validation prompts by @​kmbroai in openai/codex-security#940
• feat(serve): make dashboard tables sortable by @​mluck-openai in openai/codex-security#958

Fixes

• fix(logs): stream large saved scan JSON output by @​mldangelo-oai in openai/codex-security#932
• fix(logs): prefer complete saved rollout copies by @​mldangelo-oai in openai/codex-security#933
• fix: seal drafts with empty artifact lists by @​ianw-oai in openai/codex-security#941
• fix(plugin): include Terraform files in scan inventories by @​mluck-openai in openai/codex-security#944
• fix(targets): resolve Git metadata outside its config by @​mldangelo-oai in openai/codex-security#935

... (truncated)

Commits

• 6620a38 chore(release): 0.1.29 (#934)
• 8cc1dcf fix(dedupe): preserve undecided findings after model refusals (#960)
• 70d5b2e fix(cli): emit structured JSON errors for failed scans (#709)
• ef298ca fix(cli): show progress while patching findings (#931)
• 32c8645 chore(deps): update third-party dependencies (#954)
• 6cb0d51 fix(ci): tolerate transient setup failures and slow Windows runners (#953)
• 2547458 chore(deps): bump @​linear/sdk to 95.0.0 (#955)
• 8fb0cde feat(serve): make dashboard tables sortable (#958)
• 48c5a08 fix(dashboard): match filter control borders (#957)
• 02c5137 fix(dashboard): align filter controls and dropdown carets (#949)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.