chore(deps): bump uv to >=0.11.15 and ignore unfixable chromadb CVE
uv 0.11.7 -> 0.11.17 patches GHSA-4gg8-gxpx-9rph. chromadb has no patched release for GHSA-f4j7-r4q5-qw2c (server-only pre-auth RCE, not reachable in our embedded use); ignore until upstream ships a fix.
G
Greyson LaLonde committed
4dafb05735dfa0d6e265eaccbe784b820e8fbfad
Parent: 5cdc420
Committed by GitHub <noreply@github.com>
on 6/1/2026, 7:10:19 AM