Skip to content

Release: develop -> main#3268

Open
github-actions[bot] wants to merge 7 commits intomainfrom
develop
Open

Release: develop -> main#3268
github-actions[bot] wants to merge 7 commits intomainfrom
develop

Conversation

@github-actions
Copy link

Automatic Release PR

This PR was automatically created after changes were pushed to develop.

Commits: 1 new commit(s)

Checklist

  • Review all changes
  • Verify CI passes
  • Approve and merge when ready for production

@github-actions
Copy link
Author

github-actions bot commented Feb 26, 2026

❌ Security: 1 critical vulnerabilities

bernd2022 and others added 5 commits February 26, 2026 10:36
* feat: add NanoBot container app configuration

Add Bicep parameter file and deploy script entry for NanoBot (nbt) on production.

* feat: NanoBot in private frontdoor setup
* fix: block self-service refund for RealUnit wallet users

RealUnit wallet users must process refunds via support instead of
self-service. Added wallet relation loading and RealUnit check to
both GET and PUT refund endpoints.

* fix: update basic-ftp to 5.2.0 to resolve critical path traversal vulnerability

Fixes CVE in basic-ftp <5.2.0 (GHSA-5rq4-664w-9x2c).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants