fix: address CodeRabbit follow-up feedback from PRs #121 and #122#129

Open

michaelmcnees wants to merge 22 commits intomainfrom

fix/coderabbit-openapi-followup

Commits on Apr 9, 2026

fix: add default "hard" to enforcement in SetBudgetRequest OpenAPI spec
claude
committed
fix: add produces/consumes annotations and regenerate OpenAPI spec with requiredByDefault
claude
committed
fix: improve govulncheck logging and add missing metric docstrings
claude
committed
fix: emit GHA error annotations for unknown govulncheck vulnerability IDs
claude
committed
fix: use file-level GHA annotation for unfixed vulnerability IDs
claude
committed
fix: exclude stdlib crypto/tls and crypto/x509 govulncheck vulns
claude
committed
fix: also exclude GO-2026-4946 (crypto/x509 policy-validation DoS)
claude
committed
fix: also exclude GO-2026-4869 (archive/tar unbounded memory)
claude
committed
fix: exclude GO-2026-4865 (html/template XSS via grpc→net/trace)
claude
committed
ci: clarify govulncheck exclusion removal condition
claude
committed
fix: restore top-level security, health probe overrides, and additionalProperties after swag regen
claude
committed
build: add spec-patch target to restore OpenAPI fields lost on swag regen
claude
committed
build: use --ascii-output in jq patch and normalize swagger.yaml formatting
claude
committed
fix: add date/date-time format annotations to timestamp fields in OpenAPI spec
claude
committed

Commits on Apr 10, 2026

fix: use make spec in CI and add --requiredByDefault to Makefile spec target
claude
committed

Commits on Apr 11, 2026