Back to the changelog

• Security

  Dependency hardening

  **Known vulnerability closed in the production image.** The internal library used to generate Excel files pulled in a dependency (`uuid`) with a known vulnerability; it has been upgraded to the fixed version, with no impact on how export works. **Automated anti-regression check at build time.** The continuous-integration pipeline now blocks any change that introduces a known vulnerability of moderate or higher severity among the production dependencies — so the dependency graph can no longer degrade silently.