[1.271.4] — 2026-11-10
Fixed
- CodeQL alert wave closed at source (6 alerts): 2 high file-system-race patterns removed by review (
tests/robots-check.test.mjsunused origin+import,tests/sources-turbohire.test.mjsunused import),GET /api/pipelinenow rate-limited, a provably-true conjunct dropped in adp-workforcenow, URL-substring assertions switched to anchored regexes in posting-close tests.
Notes
- Deliberately NOT changed: product behavior — every fix is lint/security-hygiene; tests 8126 unchanged.