Skip to content

Release: develop -> main#3583

Merged
TaprootFreak merged 4 commits intomainfrom
develop
Apr 20, 2026
Merged

Release: develop -> main#3583
TaprootFreak merged 4 commits intomainfrom
develop

Conversation

@github-actions
Copy link
Copy Markdown

Automatic Release PR

This PR was automatically created after changes were pushed to develop.

Commits: 1 new commit(s)

Checklist

  • Review all changes
  • Verify CI passes
  • Approve and merge when ready for production

Add npm override for protobufjs >=7.5.5 to fix GHSA-xq3m-2v4x-88gg
(arbitrary code execution). Resolves all 3 critical npm audit findings
from transitive dependencies via @dhedge/v2-sdk and @buildonspark/spark-sdk.
* fix: move DEV deployment verification to DEV CI/CD workflow

The verify-dev-deployment check in api-pr.yaml never ran on auto-created
release PRs because GITHUB_TOKEN does not trigger pull_request events.

Move the check to api-dev.yaml as a post-deploy step where it reliably
runs on every push to develop and appears on the release PR.

* fix: keep build skip condition for release PRs
Limit individual Scrypt buy order size to 200,000 when trading
with CHF or EUR. Larger amounts will be picked up automatically
in subsequent liquidity management cycles.
Prevents race conditions when multiple commits are pushed to develop
in quick succession. Without this, parallel deploys to Azure App Service
cause only the first to take effect while subsequent deploys are silently
lost, leaving DEV on a stale commit.
@TaprootFreak TaprootFreak merged commit c96c2f2 into main Apr 20, 2026
12 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant