From ceb84eb2f51aff1b881d558c2e13d1c4b7e320c3 Mon Sep 17 00:00:00 2001
From: ORANGINGS <30224momo@gmail.com>
Date: Tue, 28 Jul 2026 12:10:03 +0800
Subject: [PATCH 1/4] Stage atomic OSV dependency intelligence update

---
 .github/osv-apply.patch.gz            | Bin 0 -> 12381 bytes
 .github/workflows/apply-osv-patch.yml |  35 ++++++++++++++++++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 .github/osv-apply.patch.gz
 create mode 100644 .github/workflows/apply-osv-patch.yml

diff --git a/.github/osv-apply.patch.gz b/.github/osv-apply.patch.gz
new file mode 100644
index 0000000000000000000000000000000000000000..f6697706e42e3b85e6579a327a64cb09569a4c22
GIT binary patch
literal 12381
zcmV-jFrv>NiwFoNDQIc}18;M7Eig4MaA9;~XaMY7dvoJ9lK)?y0;i-lVnorB{MMF|
zah!ShZXUjQ<m%Srr704!8B-)fQuZj0zx#DJ01|wN(j=MGZq+3zj|nsyjYdCy4PfH=
z^En#~uKkQTI~M$Lvz+bRN6GCxi0;!J*SA)SfX&u+b^OrdpV;wumyf)C%Nh;cxp%n7
zM#JI3-d<-g7_{*1^!xob-cO#e!FbO+V14*`$l&wmXqHYoO#Cxo$ugY44_JbG!`)kE
zRl4F;#?uVe=SFwa^wtl8S+o$JgM`OXl1($7ECvfdP5tn?GCCiSx=zUWCub1{Jl#p1
zIUi6TaGE=QFo;5S<6qx&`r8bT(z}7j7ZD6zL>^}-N9t!$vVxYoWf1bjnfZaA`8;K=
z0}F$893*}(@u4Q`=M)40QKDqwWK4cV%Pd}IY$sd9L@Jh>(`sU~zx@rkf&q-!Z@)28
z*w^2)0sn=K*D2)M$v9KnMy)9@jibPKS2>j>zG)}h_~a`}{PcE}Yj!=i*0l;Il9>A2
zme=ug`#*hg^7{GHmv5e13lHp4|CDyVdoY?E?jKp!-qG&y_;9yu=cNI{wo6TD&m(i6
z^+)DtAI!PKzGA00PI%3O2#l}O|LQ9?wDzrGr{C!h*twIWq#ie89*;Rl5Q0YTc#`^2
zn6h~SDh%U=$<9~VO%$5!)Jd)*lR2Tso<}T*+}pX2nq4@dKZlj47V<suJoYP3qQNa+
zu{ZC2VpqQ`d9s>0nR|1^bQ4@L9wxqfv*2OIK<B!#qE!oiubi0OhS7b<s^*(TEOy*m
z=b9H%qi|`oOk6%d;TXU3ab2AGA?(hl%w+%h?#*klh<7J%&z>=1x`pfsU#89shNA4k
zE7H)3)0-$uNy=zG5B!i53mBY4-qQ7P!0DML_A~GS<_1y9J$8S?Lm<yb3a(xRYY3x^
zLA>AzND5j4hG`Vs!5FnNn6Rufk7vM|=6Fk@vyk5hD_CGgqQKZ@b%6#n1$&7<$Eg>w
z14bQ%g#w=Y*^A|jowylj6h?vZi-n^?qL5YqU$lt948(*Paor)rIA8*1hjumwJ7XOt
zSUOC&%)m(@Izm_?*SrT0XV*bAa{^e^+*t;h*ua=4(os<}3G5(9SMnu?gp=8$_>g{d
zFyH4K^TqyfG~3%hEc=m0F1$!<5I!^_CmQdP6NS!#PuM#Y=Z811Xr&zpv8kK*F^+>i
zjKC+?XvObDv;y_;5L5<sS6h0@-DQFsi8=s%wX@oJb$VWG8*bxg@Mg{uJU5xJH*X<M
zoV|Yjt|Rx8vRnrK%(F>nfWfmY1}We36Yiq1nC#tuoxOYsLB_=CWk^n<C=*GkeXMSD
zMJw=$mot!F*_%f8;q6Ni(-Z#75{7saHg|%Qi$-ZGlS+!fPN9y8qSK^$Lw|yy<r^t8
z!2h1SdTFu$K@Uwiga_G721*&!PuUWj*xE*-ZWk3&alA=`l77?zZppi8%BEPzdJsK8
zZRwqvd!HdVS7qv#WP)MXk|*>gadPd%4!9)5Ri`ZsZZj)r0zM@WXxflx;HnTX$PR=N
z-}zDCP|Qg&7NRz?8;FNDQQ$QzpAg)kIof0W-F<UBL<|QIKw-Fn^xd;C&77dvdW9F#
z8y*A`HgnP&)g*A8AA_5SG2O2po}ayc@!<#i<n;a7o7eXF$@>?NUEwoof|}O~WvuPS
zMVI_~rRMkN6ZZAPgY;5~O4xMDzWIhdJ~jzH&;<W(pgvgzA9gjS!tH@wx1i23PYT&!
zuD46{qcb2H)lp?5p`T8#+K{xbiTj)SV#2^|5G<YcjH20}vx^HhD6=cjDllZ1mwyK{
z;bAdI=hmP0ba=a#jW*}pFMi)fiR`03bsc2uqpE$i;XqsnfAQq9&R*ZAYTp)nRb#hd
zze<kuROX#Z3~e{w|7bDZQcm|G7f^cc5`!F55L|BQm0ADLnavO9bIY2IW{$IeRL=Ts
z;{^<8qrgaWuy5|NKK|UpK$F`BEdpYcs0RRy(JuspPM1l7Za<5bq32-wMojb`V<|ER
z)R%)m{t0q-Rw~#ir6V3HkYeEY3ov&u00%y}6H55X0EXTH5mt}c%37aaf+)IO#wNsK
zphy4$0BnRgoM4susR`plZx(%$()ft_2~qpkA!1TY*sy<zm@ae>SUU;g4nUEZF#~4>
zNE}ci`XnF($6Gitf<i1l)(QnOfKB+<2-K1GZ8i5%iA%MDELc?WQ2>7elQ^kF6_~a>
zCv(8gxW!&a?Bx86VMzk{JkKLI+11q**<!!!?AA`o6U61@Fm<<v@S(bjNMb1-mHL@x
zp~;~AN+fx#il~aY;q@{J^b|*+7DP`Okljhb1$JZFEGrODRg`$C*sOa<oj|Uo@N)VV
z<;ayL_Z2Dyw-k`JXOVqMvjVVxo66FJ=4J@^5h0*7`7S^{Q$--7`hZL{UB+?XgWb@!
zlq)r|iDxhl${C(4{LoJ`*fmulot~Lkn=BwO5Ee?o7!dDf$uiA=qgauXWd0n@0hbLR
z?T_rI;Q0AFdP-yhwn5xXRm}&{*$Er!IncB-OR3_;0z1<;29}D$V9=Z==nP)tJ|ho#
zri7b?9Pc9E0}Dww04T5yKg7Z=0M+IiMPFb}n#T=P3T?t!2nqn`M~*d++e3SY1^}Fb
zrAHtZ>%%Z!uq(Ng0d7Aj<BHA`=#+q6N$0|%KK<6pK4n)XyE^w{G!zSm;CCE>S+CS5
zZr|1NPJB{f3%ks&=)9q5d>*kY_y$#z;y;A3A7WHeA}4s%ky1SJc;L@CMkFYVF>nfJ
zgFM1r2Mh((4%J9ReRx0scC@0sP|QFVOTd2+fNuOaM)+UKRqM{lX6t%7kQW&F3Ym&b
zO(Jm(#Xpv{=k6Z5^ATmN9gpAbgv&q`sq6S+W*VA9Dp*HYu=XF&hP!f;((Z&kh?L(w
zU!9*#@NjS-JD-fKp)~}G3k3?g&tJSdp##JLo@GhAc8PyHn#4DSnHP>N^#o(Pqps*#
z#$aRIvz-iE$HVc#V0btfAH5$AC-mPxBw@w%GzlxS=N-`H1U^LaR2LRnPk(wk7!Qw+
z2cW-EjxI0Fe3(iBb{ccnpZl)P6qh4Q4HWss+4C1UkH><C?_qC6wxT;-E*4Hg9DXbX
zvm7R2c*h)forwBo?tjXb372y{l6E`&#}*UAd3WAEJ^As~QvrusdbcvQ!z0%j9v^Ks
zwF+;|+~|0u|CPwJK!r|uQi<nsrBp#<*0_UhL@O!6QjQ4*)li4=hmMpss6`Jr7;hR^
zP$k+*N!%N|eD7dOCDo=VbVZudJ#RWC*DEhAUO^82nY)>lMRc%LZjjRLyW<1rVArxn
z<AZ%~Sh)<T3=y(c8c{C1@#xEIkJ-`>JaLi-fq05ekuBpaih|UlK6}A4r;E__LNdA(
z=VC-G6C{*@DtJQc(AtB@(&?9)_OVGn2EgW8b!<{?EV8wPG$&^a#VH?z&FL5<Rt7^j
z6%og3;NCcR*y*RYFdgJXPe__uF}2cWrGr?cE$IGkx@(Ofh?MpuP28Ov0@ya#b!OXE
zyaKJR>yrDlH{^TH%!7S$4_)_QRNkkxgT;=m?G^`=ySe|dZns;MW5T$sE}p)02DXaQ
zwykeTt(mr^ZPg1<=bBaLU24^b?(ukdWLd6vFg`q<x30Pv+_>tZTdaBySB<q-XF%8~
zzr1k+pZN>ID^47D`sH3|(tE**0c6=W+AnGVRG_Bn%7Y^y>lrN?L1YT%mfA?tpq6UC
z@?3{|@SkNJ9Juqn<AWC6)HpOKs76CYs(A!8syU*wFwz4a=>Zy2DmaJFj{3+}Py}`a
z9adMC3#C*9K~eUfich>eD(kce+cp(%Y5@O~B><gl1$%7;L*yg{1CW`Jsu(BkA-J7i
zB~|G$N&~o-<Uiu&g~{H@<Xx2xYcolSFxQ6fDnA*=6qyKfve6c~$IPWFx7TFTN_J&u
zE=3nxoD!J;*llrEZ5OomG6|YEC7Gs|I05zAbXNnRkSaSnhkbhh`M@XkcFjG!@594a
zijZUwwlt5PFzFkJf-w1f!qO};MH@1*#nI4&?1KFUg>s0o6914?Sk>5cu&+*Kb1Kzh
zA###{sCxK~^I@2Qgs(6YY=<q5q8n$;X)=GoBb03(L{Lsn*$5&PNM*3WcSI|%E+E{U
zik&L*0VW8{2>eq_<rt<E%4kpmWcM5j;Osuas|PH$Qi_=U7G7qZk;qJuIyqMuPn~1r
z^W^;1i6+$?YYd`Sd>Z*n1O}yzk3|c5tM!B9ojVBxFTh#7F47MuQmKrFw?Zu!D_ujd
zh4M?AfKE@!R;!7Erx5cg!D#r!z%nudcTx98+JPdY4(0T)WorXMui#+eO_EV(Q!UY_
zxi|O9#MODtdN;<8X@y|}nK*pKkU7n*w1G@o=2WxN3YF2RNhgm~rj5a-*I`X7(iCLY
zDMas7+o(E?xD20a%tT8AsjT&BMQH}`cKQsjSsK<~+s)|)^;a}MZP?z5K*r}8r;2Z6
zoPh0{jT1YzGR}fSlW}72XBnqH@4udLqI92YoD~KAG2_&jeG%i_p#G|HHf-;D;}p3W
z6t@N}^a|I9>I+h{oAnG+(|OS<x$;jgk2BVL^X_SqM2X3Ma)KqN-^se6f3giYr4zmu
za4P#HI311V$1@Mg%DwUKuHzkU15Oo(HgKwF5U?B~I6c(CDWo(F?VN<Ge*tKkpJbP?
zp=xahrhf#H;(M$_QF(q!&w_0AxZ$(m>zX0<8jM-RzUmvSQ``yDW&1uompn9&72c%P
zl%b}$q0E6FzPjp4|M??eQv-*8EyiRL7t%q6Bj2~UQ4nzPLMlp_I>9Kv)>##>FGQUL
z{;yzmblx<jm~REqJ%Biabi2DJ9x@!8<NX%xu1koj)WBq@@}MN~Cgtdraul88QI9Qt
zC!u<ZTtxJ$%%+U!mE-|{w&16ZgSwM?lm)`dzNzKo6*28y!>9uN7E!R*6-SQwZDI*`
z=Qz0Xf`&BSHR_o~So{Q|PoDpjx0iL&Fc|y=gph99Q_dq?z?AmhFl;VfzhK_DfSPVW
zhgssuo3HM4E&0w0yNCvQsL4{JFUyP}4)Mtr`LGrFR2JNtELS$&32s6^jY62sbX!89
z&wxYQL81m&RM^J$u!v5NN^aClBf(Kl3gJEuoRvB-XdWcdQa(swrR@|x-F6GAaHw&|
z8$@jJ4ym`_<sZ@+R7(r;sb>BL@Y6uD)lI;Bws$n&A2;3vY@9&9qB}UCy8uefwmo0s
z?TBsX=SE=|WpqcB;%$m-75B~ZBjNe4c$gpfGsz8ay4=7?Q=X%dyh)NY9R>EQP^AoL
zp33*rRjOs?7eo-95}V$Fn{?c6i<j03$M<}9^rYkb?6v*&DQ%~PNEwKGN%x;0({Fnh
zCxd@DgI|Y(W7`^B_Kn{6laCh{|NMA)+5dQHd_SG`;3NGz^x!kC=Wl?|e}6c8`*bZo
z_}Mdn{A1eh-QkyHn)Y{gtZ$9)zeYaz?~`0Xy)=ljboxG7LY{+_{>nr807B|#Z>95`
z3*V7pmb+29N+C8A1QBiGsZ{<c&)T&X^(1|wDOdD70Y3rMi||oCrj$YMmalq{W#@!S
zfRPsE6AmU6vU&Fb39MYA$BAe_aUP$D-=!@03=jWB{_7I~MlS)LXx6|_vx|xrE~Ol5
z%%qtLlia1C#9T&iOd*#QRzq_c+M?v$5>nCv^yLP$>B6#lNMW){s=_liVld6G!Hc&F
zRgj@%w?Gr%xjm%-8%HSqJTNr=JdiV3P>4c_hj0u};)?6Pu0e-`L<3AE1zrkvjZO3G
zd^XHaE7YG>Y+jro-ez&QMGsx=p+?taUHM3(`?zr;x>mC>L~S)0uB3SHv2h(Pl5Wjd
zyc*fa6gUD|ouPCw+vDCcMw=7kjKYiRMk73j*pTaQ^dWkmGsTPv@e>V|*hmTTQ)7CT
z3=yM;<R-&&1EU@cl(&IX(_`#SUa0{?<ZEF)Q9K|iWYFf%F+@!Uba7CFBVG^U%`q(v
ztSMJGqFD&hmHm*5RAaHOsw`SDt52F^!YG8&cFD^<#U-@jAeN{eu^5epVaq6FhmaA`
zGL{gksIdnd+Ea2GMr|1-1{esmHOM(lVHDV@GDIVChyB9~OtjBtv{u>HHB?l>hVi0n
zuJ6~SZXr_(SWltS8o<54WH!F@u)!*%W6i(mYLAB=@|^UIVPY23rGUJZcN=RaG@5X{
zOrH{p`4!97JDROqr>Gm7eeVRfHfYn<=_-S0?JAVuHkN~lXwxD{Gtc@;CM3=U-r})n
zMsG2SC?jSpVo!_vclz29N1mH$?@Lar&)wj-^~lujq;&`V4CgFw(zc$o$&0r0pf>Np
zaDbXyXQS;dv(a51$QP7@Y~vV4^}N48Ry-9aKV@Y%xkO##VsP`ut}$RWq{$s}+ph;$
z6<mwliAQ|D>E^m{l3Py4e){m8Ztl;LfXp+@(@H&CB2S6c@rVgHDq1Uns@%_df|JQc
z#>MCoKwsj=z3xu8?9pN{_>kb2FRq5?J{uZfHASFTR#pNT;8g0?dfP-#xf$&%TrOs~
zB6@@8<Kz0}g5JyaZ~}{#jeRNJRS?RZj`STDZ^5Tblyw$;_Hckv3k}q_F$z?3uIq$R
z=(|p!kR+J}@v^RyXc_lLdg9fBh(<Ct^vzx$1*#E%UdndOaz@O(xZ<!ieM$o{bon*}
z{~9d+w}Ov!cFEOW7iJhu=x+gH!Qk;b9z=1e>>*DnrDQqUWDk!<TW%2}x6Lfg2~F^5
z$Dn^b=G-#1l`78ZRMwdR57iKZeaFU4LgJ%;yAVqLb}^n@esSC>ylFkb8fVY5s?jpG
zw5~sbNgI;vbox+Y|9e2_T90q4kN=q0BQM?S+p0Qn&5KK;ih2t(r@MsQ!Rua8lz%AR
zpA<v#zamqVimgaf5^Wm}@<S!@NS4%rZQaH^QX<=kMMap&y|vYq^Q!QR!qqmXTjOwF
z4#KLp;>}L>JD}`3x2l{A{l7!~`#6-i&8iZL){5g*Y`)PC%Oq`1S*I)?IjdGVsNT_&
zqWh_MWPor8a+hc|Du=|^uy4t#-z}lTFB1Y>1oVJ(qIGeg<)r6}`TLVU)7`Zb+t076
z@BwT-nXIws#-S**V2u&pI!?RGY(6+rW>|Zn^#Ot@6rn$I{3%{))p>tzvF3;N3?msd
zJuChX8?_QHaqjKkTgK72Y0g4bE+uCZG$6h#WC7n-L31G}-kEI*8yF+i2tu!F0;7eo
zrh)aGA+34hua`}U>jeViTy6l%6IHz%YGqAVI7mt1TBubMms-2sS`5u6-WW4g;as}L
zl=XAYrMv-61@xa3A)c=d4dqIE3!<^HRjg<<-MnJ{6Y_r(u%VK#bd)ryu(8tRte12z
z2DWwC$GUX@KWLbdKhn~Vbo3%yyCf9{vW)>oPKBd@qvMIQpte}EeXubFTl_zptqDPL
z_J_ynDsqgYt)h0o+_)fmghp$KVsf)tmmZznfE5Q-M^Gng^2q{epeHETEmM)cfAi|)
z=2g`W;wl9-ww0h*Nfo68rZPzu-E!>!(hsx0JafnujpTd9`8?$~7X^2G5Yr<W%RWJ!
zZnO*mJ$($pjE5#T>ZhI<4WEX=`p7b0y}Z|?6OlD(X=64`Iq8aL7uhlnxG*2};}X*v
z^!1F-$FS<<n~<(h4gRk@ri_Fx9z9sDlk#~Kc$n{~i>}~nt?IC(6lam6JS?Wwlr0#W
zEXVVDKxVWBW1OJ8BWaXm-0KN46X%%*&SK^{B+R6`h^-`V`|F8Ode`vuNwjYD+G+P_
zJUVjR&99v#PyH{2?~Z@(11B0%ysJ$uXXfUwy`3Py|CP!5w@yxq&TZD-JYhb?Cx43W
z!~0V+Z)|%PwdQ^L|8@7I&21#tecxY!npB0rYA^&q>R2RjElqKE8B0rrpyZMv6bd8;
zA}kQV;*dn6P~~5fAC_N|e(&}1`Wg(iQeww;S;S0tPam(}ebDpG5^+-w7goLf<?8B{
zy49C2@GrYHdU&hWzisC0+<p)22lG3>q@O9g1{CYNYQ<dLohwz&!z)!O*?3&#caJW*
zZw8P$NAPF2>-A#QK0F*QCg9MX0c3oHtP7_nr@x#Hy5j#{o($fcU3SkeeuWP3?mu6j
zUA`Us@#O0CmqGXZFW|D(90(};?$J-V;2!>Cg~Fja-yTC8h75^)?@QxPN{-rn_jUil
z9$jy^TjNW{V@*cPSxcs!Xjd3o%d)H=_y3aOYoQC6$~w_zTaC{tl>}=!o_x+nN&y+2
zM$n@yvKx8>E><5;SwcWNu?L%i$?MT(Ryf!5%Nz${b;SA+Z++7=aE8k9O-03Mw>P`3
zPb3KeP<un%9Jk~>o@$c+{9gVG7exllKC(TI3!(}l5e0Ob0P@H=wkrnw-BAp&^<h*k
z+&JgEu>?lJq+3X;wxs}xN+R|H{=wx~u3WySeIPsK9VF+u#uOe-KFTEc^^WxJR}MV^
zRg|OSqSQ-ZhZXD;{-~O*N72pvByLW@ay5jCQi(aXJ7!=C%u(zLo72s70y!x<?9gBZ
z1M`!4ge>zhWU7>tHOf44O4t79%J-a&*`e>)tOx@%o7JEQaCb{mD;=m41~5=LSE$<n
z!-_yAbY|%|yGcLq0g#UHve+%NUBs2Ec2$nijsmlRbV+*@c&j1W_FIQHBw<=Ww)&7+
zwZz+Se2Mze*&d_^*<a_AnKUHJ=e1p;<!trL7xfVn(|AAOp9U$5aVyrqHrB4~GWG%c
zo%{|Ys2lT9L750k&qtXx2ilgf;4gP6AncDJVy3>O2~0-2kkn5v6=e!ENMgBqLZgk7
zKY2;0?-2>ncO)$Bew4qpQZP7{nfX?p&#tXTk~DLdZE*t&)~3j0Xl<_-@0UY?+%Wg;
zY(A?G$72d=(z@bhekZODW(hMpfyi$(zu90C^C8~!I;MNfM^f5@(?nre=OV}Kc$jTW
z?#?uqUeT+{W+sHln_GC6C27=;$G)vPI6~h@hB`fZg}2V3{^+$xGf+Bg!qq~m%|8o3
zv~A_`yAMaZj#6a!N!+OaO`V7ippDbKadJLGoXJujZ((8pbE5AqsZnU9_&a9K5erk=
z25AitPozb|PM}u9@VC(Z70>bYOs43|`8;WGyk|J$#5Y~(iD(C3c07JmyKe4gZF6bq
zy1+d+;LGdAc=^sKWzI$H?B)hDjCo5Y(|s|6D%PizM?g=6WS%PZQK7rCtz5!xLEA5B
zom`8aKf9h70*M<y3MvpR-A72HH9<`Qe6`Ql>mMM?b_b(_`l3xE+MY7@;@wb9xd&gm
z1$ekD-JOp?%*a7pVlP4iCCfQjL&h-phKMZV(ft$fUW8*18PCI6F|Ib0QO9awu9q!h
zI7k#QTW5D4MibCE!Ve{?BC;LKKPXvE_o440T13n?+T1Nx#02uh0-(y7tvjt0)lLvO
zB*nhUqYCK*1FA`;6XtyELu4jr*^VS-3q?iJQ0hA-Z)TI<P<uR}zf6o03&kMGeKokg
zhc(BqyRt6pz^b-jDP3zheTQKNsd}BrETh#%icVM5PVBm?<>1%-=5{j!6Bae@$)Vb6
z%tv15zSDOAxn0HTF+s2nH4zW1__|oUFn`tp_Z>zSi_)Koxy9*?MNFk4X2j!~lG)uM
zO_#u!1hp>qgM+HVxn)3J0dnyR0n&6Yw?t}Ix9&T_p58>r^{-0E)$2oT6-|pZ@utC+
zMWtCRk<nqs1uH8RYP&-iX?3_oMPSt(HpNulor41*oCs0<=d-Is@l*1YJzh{n;|u&K
zYs4TToQz-q$!EBqam|W8%>`OZxLPn8cas%~TBBf58r(GRFs$tQbn*^z?YUh58fZv{
zTrz{w$pZ&fxS0?$s;{q3YuRKqr?_IvR_9-uFVO@&9DjxIk0Jp%mA;S=|E-Xi8h57_
zEY^?qB8wS<F&P{5=@x7Qa)t~#WVUj-TaMn2iRB^JBX2M@ptV9&@>=YQ7S2q(kXm@$
zJw-cY31*$VkxVc04obAvmc24@v(A`1`zLN7n)~!_;x+S5#P{zdd!j#M+=*UdMoju>
zDgBVo{4E1sObY+l&-QR%%xA0I#y=e6m<;oP5?)<&0jX>gIj-0Z`PWV(8P9>9BJ$}&
zgkR+Iq|k9&Hj=zBhyy@A<x|8=@LNJkZ68)bq+}Lj@Y4`Tcm8=nk~<AwL0f2I#lU=C
z4-{1HHA3nhd+&||`zq1}?!ezB3$;4+c!mANSj3*~bwpR@!<ZZTgLY{mB`G;W!7(oH
zJ(qMOu|5AwN=WGeZRrPmpSkQJjiXwGT#=__Fh7hZ-jML<h!kiCRiv#J^5N@8xfk!6
zI=oEis`C{P=$M;Y=*5psm{=4;0306G<(3nzMOqUq2A1Pv4nuADcX;HD#$>7u{j%gV
zvxkhf?$a#CXzM;1NftNY32XeNx@0CU9I%jF)?FG!Y*y6x=el!X=eEMk-(cVrSX8Qg
zoz}hfV-Dl1&3HWd3_U9U{rCSuWia47w-*F&JoYuu5w0v)MQ|G&cjwiisIF>)K+;Nf
zTbiF{)Kq_B!5E`$=H!rRmw|J*-Y{e0HwrP__5p>7Z2+ZA#{Ov5kvlx7>AlmUz5@z!
zJK7~r##HGDGRv6Q$+jKX-$5AKS>k!XC{vD`b#GibBjaBC4I`5=2O!t?XTM+i?*;@1
z#cHW6c<wlk`?=aaVoYN`G$u^?ECpu0e*###DCn6K|6YO5k~~^PZU!pt8Tg@^FaTU-
zE$GeUxU^atG~dIijzn7-m$Ky$)D}UvC$l+@=abkJUkMkQciZ)UQ44XU4ZH$THxLg5
zI}y=(GsAkT+BjiMk9ZTRVVy1?N7Xh7#gG_1Z_V-%2~0;7B0>I|zmN!pUW5#DNzL*V
z?=||?k^6hZj^EQ<ct+UN3-e{C?!R-Q65=A?K*5vT1@1m9_oCN6YBc)1k8OU{7g_OJ
zp}E>-Lk@k;1cCsjJbWZrO^4Tlz_*P+&v2+$tVXLr<T-l9Y{J<q+-97S_FhWZQFU;v
z@Bo~v!Vw5=ZttGy*{?Aaug#|}sLSVxi>ZAatC~I}+*e}B&{lE5pKV~oQCWQ)XB`yh
zW8TFWDg+M-Ha5P&*fX@Lmc!2$J1V#NY$N(FrCJl;V8R0&d#3>;IlVl;IzK&mk-%Fs
zoNv|DY5i3XGX|DOvil=WIe+=;;_~X`*Q@e_!%!htoPVuslb09I&n{1{&fw5qo;^Q*
z{nB<*a)zQNW|l85{#<?@qOpbSyixUS526nD&Zm_a8A5E}`0urumtPns{2yH=r7)EN
zk=Aw4Dz;jQV8X#ea=}RTHSbDaG%7pNWi$2wlt&&}Veh~Eqo_SB{GQ{ZT?$2^0coJJ
z5!f3`CG3(A7aQ_1m=$hsoG*lF2q>Q!gBIWFkC?$OGzTB^VdIFN2H(+`2;WLq6Up+6
zZ4@fRzCGEm?*up?S7qCYuwjjp=9o6%_Xjx03;Koe40~g8qne7MpoD$uXFEi}RxZV2
zsXQarW~s7F-R0}s`ADanx(DZ-cFbYhww-w95$4T%Js;gGe;_h%%du-28m;rHGFj6`
z;X9DCVTaIdNgMi2jdJj)?<i+_#<z;qFlG<nzXRWA&uEn$`iDJ-S`&f@bQ~Q>a&iM+
zNs!fS2!&56htMG=opg)}$*H)P0>bN8_lvw#hu5ooS;rjX&|FpgI&5T*dDC5L=`I2R
zTQZiQx>Ughj_nv7q?CfcU8($w*xTQR?MnBk*{IZ|k0L}mbkPe()v0wPZXz1mP5=&F
zRmXKJ5G|2bu4obuaMdF7B%LxOj|VaucG9vp17k5pw(}X{z)@}inltOK>1Sq}R+UB`
z1}foTM)NP>HD!N=d>bjO4?m?3$;oC#;}--OsfvPrppkha<BCS3M)T&Vk!6i1t>dG|
z*9D~|Sl>Xn5qk?EN6(;~#IwD%&SHfooB|2z9V?IbrSUd<3Q9abd;a?L>ipu@ZgDY*
zQ(fFJWwo<YD`IDwUt&$*VDwJ328A!srx73SuTiB!h{-n_Eao7)$;9c;&%38DF1oKT
z&jx=wd;8~$%jeyc3Y)c{%*64rIA8ITqE%keSeKNnp9WB$7hE|_z-FPxlU#6RG8xqX
z3PsPC_Z_rAs!A(Z(`$hByky@qdUhoql^R3fi|G(%z{`b|pU0zMuJ$-9v3D#l+NMBv
zyMJ*LF&R_J151FG4$y&<e0&Ti`S=-~By=lCq%TW0u^=P6I0z-w@C>k_re3w6wqP#i
zQ<<S4ec-m2szDOnXLo+MSs`$SG}b^i#Xp&xTeW7Djl)+HsQ9=9X#<g911h;bdy+Pr
zCAQejCYtic5|F{guw(s_t!h+mkLBi<p~EKPqxU^3UDWTi^1Ye{dj!{ZI$uFxsIFuY
zy9vrk#(yDrX>IiJy<V}C`<QnrT7@B}U%DRgG!hfz%t?9g%5&BM9xMCI9->iSZl*bU
zkdb~}5{nFie%)u3u~8l_7Flg#g`Z~Yaj6>{M8X~K34<~V<#w!JAz0){wG(`rS{^D7
zD0xv-=EAudhy^?JkG=~PSrG{_T<gh`^hjU8f>L0<x@eYv^7O{YctZuO_TDlZFp)>`
ziiu1{@f;`2Z=+tZ9&0@he`o?1Y`umuY>0Wp0tPH2ZPeexaueqxi=8SMxlsMZhTp5C
z;h6=#$!-~IUf|63PS2KOcr-Dq$f}J_juJYpBzO5}vJq3a(&dwQW5kC2U$B&}rVw5@
zG7anXRzseB97)!PqY)@G10F~5s5EuQBDt)_$yRT}!DMt$+qKyPd1T`0kL;;DGjzQT
zjd*DaOT8aXK&<)@h;?(nixDd2KfNdTOS1*~x)FLxP(P_}ih9^~3l{2gsszqyuheIX
z$i?M9tBtA-em%Z^d^{AAV1C>@Dy)ef93?Ij+U*cCHxV&6sm48^<xru!s;d5FF=SBs
z8OsZ{Rh>b%9vndesBa+tQy0sF-@A9SuH;m=#IlMf3Ga4li3(dz&fKQD+;E#*dt@~v
zi*O3qGV&n}$(nL@4_fkY(&W-{3v&8;^b-bn<8r>dhs)l$>j8<?>4GI-VBnv0(69ZP
zo{HP}9VdYDgfcwU>Z{=_pH`*S7qnXIY2Hx<Hf3o%v1!BEi0X#cWYIm8G>?wb*3mbE
z5<$V>m{?&qTkf>4AU*?~?qE6pRE1yCZ5jU@L*eI7^W_IjsE3a%22Wr&`yp_6J6`q9
z-Zp|Ctz-%xVmrz-fjk9~s#V%==~}=l^ZAr|bvyqwAPuUFc%mPJ)%qTWxE2V_N+9XD
z>%h+3%%_{XSvBbzvi4~*THkh>jgmb<DR%x`_iG)O?DxvId=)kSiR>OFSL3C+wEbxJ
z91VHq-lJn;_w3Et<@wdyLHFwIi?eRek`?-K*F7~Q0KE|9>uvE1yZ+XeKFHoJ&Ct8v
zp=uVQpVFD9fL8MwR@^5@QOcrNapRJSO`Sk|v{hq~84RsYiYDP)D_?Nh6;NpVmbpk#
z6K@B_F;uX|pm67UF~&o6DSxBvq4(b-iwRf@E@FlMKL}UZD{fFK>(ubLnU6-{8hd+&
zX9=jD{J#8CrAp*Iyu`4!s^Jo3yA_tp;H9Gmf<6s|@VwxK*w%N8fs>(+`AX~8mBUcA
zvl@>ZHSozyY&Hys!f#+SIJ`GH4CkmI@CM>Ywvl|3JSZm_<#%(quB;kRGizjxWS7QD
zu<$}3)A?w)y2TOM2*+9TY1S$`#*etyhl>yI-EmskQFdH%l;NTEQ=IKg+|tR%+#R%$
z{SaARLDUg<NpnMYZF66#`mPFGYOLf5DhlFR=$zDZ7FlwF%pfHjDEO&b4uB3GQfdyS
zW@<2myRb7!)j90##P&Q@`yA^8_<uONuj=(-_8)}C;L>Wb+dH34@5L|JXPIquF_}H+
zzVg~IR2?vUT@z`(UUfRHtSJ`vZZ@6{S0Db+X}z00|Lbt}e%^!3=d)J7(>cmoS>xX-
za!M+n%pWQTM+fgL!}321G^tT-ZI&w1l1TIKiom6bN1uioj&P&kFWe&CY8N|TDt;)F
z$^&Yax#b^*lUW7D$nhTZRCr6j|8Ay|XH!<dqvYMpBvBU_vh_G?iDw6XAis5d)*M)6
z#Rp9R%qRBu8(A|uJ{He(x^|P(T;&H8EW_>Q8p^UBE;p-neJZy7P$wg=BiY9llm$g=
zEwY$n?4}SF79fkEEjS6d+V5uXW;%iOyIJM^9A=fxm+uchA7TpEj}3up#Ko$ahHN3@
z`TX#DxU75>2ap~8bKWC!6BKBr8ld7BmSvHb0Fi1ii1+##n|r&A^d2{Qe_wC&u`}+!
z)j7tf>NKd{vr_D6^VySUN6q0rcGORS+I)Ka^;ytZHqvjL610Rbfyp$L>THWqZvu^I
zRT!GCmYiB?G7+POYc5L%l~~QLSgkIf)~1zaqzs8m@dcrW1kq4Ep3(_W=IRwhf=*_5
zmMUlq$pl4a71M~Dq48I6Qzi!;>2#RA$&oo8e#ps9uliMd^NRCq;*6Ev7(S@Jr9a~s
zIYbjy{g_9eyG9s!^#dM#!3cPazsIIM9lYN6++{(BDBsqAd1wVItWpN?2%E2B+uNZq
zXe~0yxMtC43$`M`=>Pmn_oO})|EXV#|I}~9f0A8apf5LmxJ{3uf`&7GKh`c##A_Ga
zV!0u`M&Hdi(2-Md9Y<+{_*MiK{OWD@?6lr$v>NrMSgH7L0VITW$1i~rJD7qk4oRgd
zwn|JkIel|Ra})@^ne;==RSZ=dc<#ITI<J6FpP=0N%?9py@Ed-x2?&1L=+>5T6T9I2
zln;Lt#<m5e)p)WCp4LKBdP~?Yf->cMj)y9J!0CWz>!skSZg7eTh_B*X<d}_eGD_^?
z#3N(x{Kx&cu<OB!1z0g42?1ehon=>S&TIr>bCcC-lP5dZWAX&Ahd5yJniP}JnT=Sk
z*-nLXqJkdODW()vEmq7dIEdS+htZuxkv*;aAdN>&M~zey$os?I@XZ1$-J$HgPDUM^
zQ-@`QWlCh03rf=qn?;qlp(j<d7Aq;&g9xG*zID#d_pL!?e}Qncx)|_#APmUw;G{|w
zGpI^{OYNDPh3jOMWiko-W0;&&c!Sz-Oh3{|eDMwlFswFlPmyL0#Q!Lqc?uj?A(<q)
z<!~dk0Dy(TWHp$N$H<%j-yzwo!QF7N5{P|3GTL57Bm&+ZXtQ1Z{YphA4JIi6g1D9C
z@dI?zXg#Snp4MB>t{ROt{_iizK4qkLlx=m6u%AhgsCqsoaiyjisa=Sx8QsFxMaY<;
zF0!dXkILSxyAPm9IvQ|S9&vvaEoA^fM$w{RnF!}mdhs-j?0k>D;(XM#2O%gs2vT-Z
zLqad<Z-*Qdq**p69PMHmmw0h4Bb``%69&A1JNQ^=8*)&D3?`7MVvK?bxG3hMZ;T8M
zw%)}~e)!>sWOoqEJL&r~ePx*N9Gm>O47J5Y33YMP!KF%c4QE*oauJCN>Y%YOaXuVI
zQj4Q>I;>B(xz0_h^XdS)mpMZIAK`Q-Eo%^im&MRu1ws9z0HmGS=gUD5yiun)NHR7Q
zRtO{bz&M?t+Y4Em2e<(nAwp?Z1N0zeR2)iYl`k_Gn5nK#r<2RgOq`z19%^ZqhKq&P
zmMs>ljdaOzAX+|6tTr;Uu2LVXo}&5X*~#;lXW5;jKvriO!BKpKVw(*P)af8-#Io&j
z#&rMX{71f*an4Er(O2ZI^k}6yEZw6dmv#E$94fr!@0UZWV~=9u?_;r|LjSj9ujZTe
zV&h&C>1V<~OD6v7n5$T=WrAGIKk!uC;`Xr*JNk(PFoU~A7)ei;#jWO;)a!sJz0g*J
zYZAYQ=RoGPkT}=tr)Bfd1gU(9--*)4dZPsca>XZbr$gh@o6rXY+N}o$yPdqh<q!Ko
z`CJBZ3kg>sY0yfMa7f3A*wPATrCF4yrl5z1F?!zJ?4z;}QavK4YG1FY^~H)04L+9!
zm#5=K<M?SK%bty&J#Dszwoh=lr)Pz6B14<aR(e!<g#WaZW2Yu=NYREEti9rtPLPZo
zL*U|ct+Ma#z>N_&kgf&-gEsA@9K<A4^`&1{!3j6476-}Q&7v;;1eV}{CD>f8N0=1a
zBIULh>p(`ut&oC8WTX-#{o%$Yzw3U3li#N>fK_n`maX{9sJ%+j(1{wE92RiDnTfLn
zNid_i_*!9_t+3*t%8`tm9eY62WDn$g%@a!x$6J!x!6So40aq$hmW7+bfn+AIMIKyX
zM3?qbD2U{;(}~A$Y1qLXm3-<Op&p(Gv}kXC&+4TejpAB@kejb|dJj!ubu(Y)m463B
P`Q85j+-guvV#xpi2&C`z

literal 0
HcmV?d00001

diff --git a/.github/workflows/apply-osv-patch.yml b/.github/workflows/apply-osv-patch.yml
new file mode 100644
index 0000000..2fafa8a
--- /dev/null
+++ b/.github/workflows/apply-osv-patch.yml
@@ -0,0 +1,35 @@
+name: Apply OSV dependency intelligence patch
+
+on:
+  push:
+    branches:
+      - agent/osv-dependency-intelligence
+
+permissions:
+  contents: write
+
+concurrency:
+  group: apply-osv-dependency-intelligence
+  cancel-in-progress: false
+
+jobs:
+  apply:
+    if: github.actor != 'github-actions[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: agent/osv-dependency-intelligence
+          fetch-depth: 0
+      - name: Apply verified development patch
+        run: |
+          gzip -dc .github/osv-apply.patch.gz > /tmp/osv-05.patch
+          git apply --check /tmp/osv-05.patch
+          git apply --index /tmp/osv-05.patch
+          git rm .github/osv-apply.patch.gz .github/workflows/apply-osv-patch.yml
+      - name: Commit atomic 0.5.0 update
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git commit -m "Add zero-key OSV dependency intelligence"
+          git push origin HEAD:agent/osv-dependency-intelligence

From db6d8ab8669b98e63bb022f9d4ad455db3b997e5 Mon Sep 17 00:00:00 2001
From: ORANGINGS <30224momo@gmail.com>
Date: Tue, 28 Jul 2026 12:11:58 +0800
Subject: [PATCH 2/4] Allow the atomic OSV apply job on the draft PR

---
 .github/workflows/apply-osv-patch.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/apply-osv-patch.yml b/.github/workflows/apply-osv-patch.yml
index 2fafa8a..1e285e9 100644
--- a/.github/workflows/apply-osv-patch.yml
+++ b/.github/workflows/apply-osv-patch.yml
@@ -4,6 +4,9 @@ on:
   push:
     branches:
       - agent/osv-dependency-intelligence
+  pull_request:
+    branches:
+      - main
 
 permissions:
   contents: write

From 81ca6ab1fc1aa2a20fda3fb62b01a21251958584 Mon Sep 17 00:00:00 2001
From: ORANGINGS <30224momo@gmail.com>
Date: Tue, 28 Jul 2026 12:20:07 +0800
Subject: [PATCH 3/4] Repair atomic OSV patch transport

---
 .github/osv-patch/g00                 | Bin 0 -> 3000 bytes
 .github/osv-patch/g01                 | Bin 0 -> 3000 bytes
 .github/osv-patch/g02                 | Bin 0 -> 3000 bytes
 .github/osv-patch/g03                 | Bin 0 -> 3000 bytes
 .github/osv-patch/g04                 | Bin 0 -> 381 bytes
 .github/workflows/apply-osv-patch.yml |  12 +++++++++---
 6 files changed, 9 insertions(+), 3 deletions(-)
 create mode 100644 .github/osv-patch/g00
 create mode 100644 .github/osv-patch/g01
 create mode 100644 .github/osv-patch/g02
 create mode 100644 .github/osv-patch/g03
 create mode 100644 .github/osv-patch/g04

diff --git a/.github/osv-patch/g00 b/.github/osv-patch/g00
new file mode 100644
index 0000000000000000000000000000000000000000..d30b6a095281c2f82041f49f21721ba6dbcf2553
GIT binary patch
literal 3000
zcmV;p3rF-HiwFoNDQIc}18;M7Eig4MaA9;~XaMY7dvoJ9lK)?y0;i-lVnorB{MMF|
zah!ShZXUjQ<m%Srr704!8B-)fQuZj0zx#DJ01|wN(j=MGZq+3zj|nsyjYdCy4PfH=
z^En#~uKkQTI~M$Lvz+bRN6GCxi0;!J*SA)SfX&u+b^OrdpV;wumyf)C%Nh;cxp%n7
zM#JI3-d<-g7_{*1^!xob-cO#e!FbO+V14*`$l&wmXqHYoO#Cxo$ugY44_JbG!`)kE
zRl4F;#?uVe=SFwa^wtl8S+o$JgM`OXl1($7ECvfdP5tn?GCCiSx=zUWCub1{Jl#p1
zIUi6TaGE=QFo;5S<6qx&`r8bT(z}7j7ZD6zL>^}-N9t!$vVxYoWf1bjnfZaA`8;K=
z0}F$893*}(@u4Q`=M)40QKDqwWK4cV%Pd}IY$sd9L@Jh>(`sU~zx@rkf&q-!Z@)28
z*w^2)0sn=K*D2)M$v9KnMy)9@jibPKS2>j>zG)}h_~a`}{PcE}Yj!=i*0l;Il9>A2
zme=ug`#*hg^7{GHmv5e13lHp4|CDyVdoY?E?jKp!-qG&y_;9yu=cNI{wo6TD&m(i6
z^+)DtAI!PKzGA00PI%3O2#l}O|LQ9?wDzrGr{C!h*twIWq#ie89*;Rl5Q0YTc#`^2
zn6h~SDh%U=$<9~VO%$5!)Jd)*lR2Tso<}T*+}pX2nq4@dKZlj47V<suJoYP3qQNa+
zu{ZC2VpqQ`d9s>0nR|1^bQ4@L9wxqfv*2OIK<B!#qE!oiubi0OhS7b<s^*(TEOy*m
z=b9H%qi|`oOk6%d;TXU3ab2AGA?(hl%w+%h?#*klh<7J%&z>=1x`pfsU#89shNA4k
zE7H)3)0-$uNy=zG5B!i53mBY4-qQ7P!0DML_A~GS<_1y9J$8S?Lm<yb3a(xRYY3x^
zLA>AzND5j4hG`Vs!5FnNn6Rufk7vM|=6Fk@vyk5hD_CGgqQKZ@b%6#n1$&7<$Eg>w
z14bQ%g#w=Y*^A|jowylj6h?vZi-n^?qL5YqU$lt948(*Paor)rIA8*1hjumwJ7XOt
zSUOC&%)m(@Izm_?*SrT0XV*bAa{^e^+*t;h*ua=4(os<}3G5(9SMnu?gp=8$_>g{d
zFyH4K^TqyfG~3%hEc=m0F1$!<5I!^_CmQdP6NS!#PuM#Y=Z811Xr&zpv8kK*F^+>i
zjKC+?XvObDv;y_;5L5<sS6h0@-DQFsi8=s%wX@oJb$VWG8*bxg@Mg{uJU5xJH*X<M
zoV|Yjt|Rx8vRnrK%(F>nfWfmY1}We36Yiq1nC#tuoxOYsLB_=CWk^n<C=*GkeXMSD
zMJw=$mot!F*_%f8;q6Ni(-Z#75{7saHg|%Qi$-ZGlS+!fPN9y8qSK^$Lw|yy<r^t8
z!2h1SdTFu$K@Uwiga_G721*&!PuUWj*xE*-ZWk3&alA=`l77?zZppi8%BEPzdJsK8
zZRwqvd!HdVS7qv#WP)MXk|*>gadPd%4!9)5Ri`ZsZZj)r0zM@WXxflx;HnTX$PR=N
z-}zDCP|Qg&7NRz?8;FNDQQ$QzpAg)kIof0W-F<UBL<|QIKw-Fn^xd;C&77dvdW9F#
z8y*A`HgnP&)g*A8AA_5SG2O2po}ayc@!<#i<n;a7o7eXF$@>?NUEwoof|}O~WvuPS
zMVI_~rRMkN6ZZAPgY;5~O4xMDzWIhdJ~jzH&;<W(pgvgzA9gjS!tH@wx1i23PYT&!
zuD46{qcb2H)lp?5p`T8#+K{xbiTj)SV#2^|5G<YcjH20}vx^HhD6=cjDllZ1mwyK{
z;bAdI=hmP0ba=a#jW*}pFMi)fiR`03bsc2uqpE$i;XqsnfAQq9&R*ZAYTp)nRb#hd
zze<kuROX#Z3~e{w|7bDZQcm|G7f^cc5`!F55L|BQm0ADLnavO9bIY2IW{$IeRL=Ts
z;{^<8qrgaWuy5|NKK|UpK$F`BEdpYcs0RRy(JuspPM1l7Za<5bq32-wMojb`V<|ER
z)R%)m{t0q-Rw~#ir6V3HkYeEY3ov&u00%y}6H55X0EXTH5mt}c%37aaf+)IO#wNsK
zphy4$0BnRgoM4susR`plZx(%$()ft_2~qpkA!1TY*sy<zm@ae>SUU;g4nUEZF#~4>
zNE}ci`XnF($6Gitf<i1l)(QnOfKB+<2-K1GZ8i5%iA%MDELc?WQ2>7elQ^kF6_~a>
zCv(8gxW!&a?Bx86VMzk{JkKLI+11q**<!!!?AA`o6U61@Fm<<v@S(bjNMb1-mHL@x
zp~;~AN+fx#il~aY;q@{J^b|*+7DP`Okljhb1$JZFEGrODRg`$C*sOa<oj|Uo@N)VV
z<;ayL_Z2Dyw-k`JXOVqMvjVVxo66FJ=4J@^5h0*7`7S^{Q$--7`hZL{UB+?XgWb@!
zlq)r|iDxhl${C(4{LoJ`*fmulot~Lkn=BwO5Ee?o7!dDf$uiA=qgauXWd0n@0hbLR
z?T_rI;Q0AFdP-yhwn5xXRm}&{*$Er!IncB-OR3_;0z1<;29}D$V9=Z==nP)tJ|ho#
zri7b?9Pc9E0}Dww04T5yKg7Z=0M+IiMPFb}n#T=P3T?t!2nqn`M~*d++e3SY1^}Fb
zrAHtZ>%%Z!uq(Ng0d7Aj<BHA`=#+q6N$0|%KK<6pK4n)XyE^w{G!zSm;CCE>S+CS5
zZr|1NPJB{f3%ks&=)9q5d>*kY_y$#z;y;A3A7WHeA}4s%ky1SJc;L@CMkFYVF>nfJ
zgFM1r2Mh((4%J9ReRx0scC@0sP|QFVOTd2+fNuOaM)+UKRqM{lX6t%7kQW&F3Ym&b
zO(Jm(#Xpv{=k6Z5^ATmN9gpAbgv&q`sq6S+W*VA9Dp*HYu=XF&hP!f;((Z&kh?L(w
zU!9*#@NjS-JD-fKp)~}G3k3?g&tJSdp##JLo@GhAc8PyHn#4DSnHP>N^#o(Pqps*#
z#$aRIvz-iE$HVc#V0btfAH5$AC-mPxBw@w%GzlxS=N-`H1U^LaR2LRnPk(wk7!Qw+
z2cW-EjxI0Fe3(iBb{ccnpZl)P6qh4Q4HWss+4C1UkH><C?_qC6wxT;-E*4Hg9DXbX
zvm7R2c*h)forwBo?tjXb372y{l6E`&#}*UAd3WAEJ^As~QvrusdbcvQ!z0%j9v^Ks
zwF+;|+~|0u|CPwJK!r|uQi<nsrBp#<*0_UhL@O!6QjQ4*)li4=hmMpss6`Jr7;hR^
zP$k+*N!%N|eD7dOCDo=VbVZudJ#RWC*DEhAUO^82nY)>lMRc%LZjjRLyW<1rVArxn
z<AZ%~Sh)<T3=y(c8c{C1@#xEIkJ-`>JaLi-fq05ekuBpaih|UlK6}A4r;E__LNdA(
z=VC-G6C{*@DtJQc(AtB@(&?9)_OVGn2EgW8b!<{?EV8wPG$&^a#VH?z&FL5<Rt7^j
z6%og3;NCcR*y*RYFdgJXPe__uF}2cWrGr?cE$IGkx@(Ofh?MpuP28Ov0@ya#b!OXE
zyaKJR>yrDlH{^TH%!7S$4_)_QRNkkxgT;=m?G^`=ySe|dZns;MW5T$sE}p)02DXaQ
zwykeTt(mr^ZPg1<=bBaLU24^b?(ukdWLd6vFg`q<x30Pv+_>tZTdaBySB<q-XF%8~
zzr1k+pZN>ID^47D`sH3|(tE**0c6=W+AnGVRG_Bn%7Y^y>lrN?L1YT%mfA?tpq6UC
z@?3{|@SkNJ9Juqn<AWC6)HpOKs76CYs(A!8syU*wFwz4a=>Zy2DmaJFj{3+}Py}`a
z9adMC3#C*9K~eUfich>eD(kce+cp(%Y5@O~B><gl1$%7;L*yg{1CW`Jsu(BkA-J7i
uB~|G$N&~o-<Uiu&g~{H@<Xx2xYcolSFxQ6fDnA*=6qyKfve6c~$IPWcleg3W

literal 0
HcmV?d00001

diff --git a/.github/osv-patch/g01 b/.github/osv-patch/g01
new file mode 100644
index 0000000000000000000000000000000000000000..5cac2c63a9ed1ef7d1b8397312c72135ab0a97f3
GIT binary patch
literal 3000
zcmV;p3rF-Sx7TFTN_J&uE=3nxoD!J;*llrEZ5OomG6|YEC7Gs|I05zAbXNnRkSaSn
zhkbhh`M@XkcFjG!@594aijZUwwlt5PFzFkJf-w1f!qO};MH@1*#nI4&?1KFUg>s0o
z6914?Sk>5cu&+*Kb1KzhA###{sCxK~^I@2Qgs(6YY=<q5q8n$;X)=GoBb03(L{Lsn
z*$5&PNM*3WcSI|%E+E{Uik&L*0VW8{2>eq_<rt<E%4kpmWcM5j;Osuas|PH$Qi_=U
z7G7qZk;qJuIyqMuPn~1r^W^;1i6+$?YYd`Sd>Z*n1O}yzk3|c5tM!B9ojVBxFTh#7
zF47MuQmKrFw?Zu!D_ujdh4M?AfKE@!R;!7Erx5cg!D#r!z%nudcTx98+JPdY4(0T)
zWorXMui#+eO_EV(Q!UY_xi|O9#MODtdN;<8X@y|}nK*pKkU7n*w1G@o=2WxN3YF2R
zNhgm~rj5a-*I`X7(iCLYDMas7+o(E?xD20a%tT8AsjT&BMQH}`cKQsjSsK<~+s)|)
z^;a}MZP?z5K*r}8r;2Z6oPh0{jT1YzGR}fSlW}72XBnqH@4udLqI92YoD~KAG2_&j
zeG%i_p#G|HHf-;D;}p3W6t@N}^a|I9>I+h{oAnG+(|OS<x$;jgk2BVL^X_SqM2X3M
za)KqN-^se6f3giYr4zmua4P#HI311V$1@Mg%DwUKuHzkU15Oo(HgKwF5U?B~I6c(C
zDWo(F?VN<Ge*tKkpJbP?p=xahrhf#H;(M$_QF(q!&w_0AxZ$(m>zX0<8jM-RzUmvS
zQ``yDW&1uompn9&72c%Pl%b}$q0E6FzPjp4|M??eQv-*8EyiRL7t%q6Bj2~UQ4nzP
zLMlp_I>9Kv)>##>FGQUL{;yzmblx<jm~REqJ%Biabi2DJ9x@!8<NX%xu1koj)WBq@
z@}MN~Cgtdraul88QI9QtC!u<ZTtxJ$%%+U!mE-|{w&16ZgSwM?lm)`dzNzKo6*28y
z!>9uN7E!R*6-SQwZDI*`=Qz0Xf`&BSHR_o~So{Q|PoDpjx0iL&Fc|y=gph99Q_dq?
zz?AmhFl;VfzhK_DfSPVWhgssuo3HM4E&0w0yNCvQsL4{JFUyP}4)Mtr`LGrFR2JNt
zELS$&32s6^jY62sbX!89&wxYQL81m&RM^J$u!v5NN^aClBf(Kl3gJEuoRvB-XdWcd
zQa(swrR@|x-F6GAaHw&|8$@jJ4ym`_<sZ@+R7(r;sb>BL@Y6uD)lI;Bws$n&A2;3v
zY@9&9qB}UCy8uefwmo0s?TBsX=SE=|WpqcB;%$m-75B~ZBjNe4c$gpfGsz8ay4=7?
zQ=X%dyh)NY9R>EQP^AoLp33*rRjOs?7eo-95}V$Fn{?c6i<j03$M<}9^rYkb?6v*&
zDQ%~PNEwKGN%x;0({FnhCxd@DgI|Y(W7`^B_Kn{6laCh{|NMA)+5dQHd_SG`;3NGz
z^x!kC=Wl?|e}6c8`*bZo_}Mdn{A1eh-QkyHn)Y{gtZ$9)zeYaz?~`0Xy)=ljboxG7
zLY{+_{>nr807B|#Z>95`3*V7pmb+29N+C8A1QBiGsZ{<c&)T&X^(1|wDOdD70Y3rM
zi||oCrj$YMmalq{W#@!SfRPsE6AmU6vU&Fb39MYA$BAe_aUP$D-=!@03=jWB{_7I~
zMlS)LXx6|_vx|xrE~Ol5%%qtLlia1C#9T&iOd*#QRzq_c+M?v$5>nCv^yLP$>B6#l
zNMW){s=_liVld6G!Hc&FRgj@%w?Gr%xjm%-8%HSqJTNr=JdiV3P>4c_hj0u};)?6P
zu0e-`L<3AE1zrkvjZO3Gd^XHaE7YG>Y+jro-ez&QMGsx=p+?taUHM3(`?zr;x>mC>
zL~S)0uB3SHv2h(Pl5Wjdyc*fa6gUD|ouPCw+vDCcMw=7kjKYiRMk73j*pTaQ^dWkm
zGsTPv@e>V|*hmTTQ)7CT3=yM;<R-&&1EU@cl(&IX(_`#SUa0{?<ZEF)Q9K|iWYFf%
zF+@!Uba7CFBVG^U%`q(vtSMJGqFD&hmHm*5RAaHOsw`SDt52F^!YG8&cFD^<#U-@j
zAeN{eu^5epVaq6FhmaA`GL{gksIdnd+Ea2GMr|1-1{esmHOM(lVHDV@GDIVChyB9~
zOtjBtv{u>HHB?l>hVi0nuJ6~SZXr_(SWltS8o<54WH!F@u)!*%W6i(mYLAB=@|^UI
zVPY23rGUJZcN=RaG@5X{OrH{p`4!97JDROqr>Gm7eeVRfHfYn<=_-S0?JAVuHkN~l
zXwxD{Gtc@;CM3=U-r})nMsG2SC?jSpVo!_vclz29N1mH$?@Lar&)wj-^~lujq;&`V
z4CgFw(zc$o$&0r0pf>NpaDbXyXQS;dv(a51$QP7@Y~vV4^}N48Ry-9aKV@Y%xkO##
zVsP`ut}$RWq{$s}+ph;$6<mwliAQ|D>E^m{l3Py4e){m8Ztl;LfXp+@(@H&CB2S6c
z@rVgHDq1Uns@%_df|JQc#>MCoKwsj=z3xu8?9pN{_>kb2FRq5?J{uZfHASFTR#pNT
z;8g0?dfP-#xf$&%TrOs~B6@@8<Kz0}g5JyaZ~}{#jeRNJRS?RZj`STDZ^5Tblyw$;
z_Hckv3k}q_F$z?3uIq$R=(|p!kR+J}@v^RyXc_lLdg9fBh(<Ct^vzx$1*#E%UdndO
zaz@O(xZ<!ieM$o{bon*}{~9d+w}Ov!cFEOW7iJhu=x+gH!Qk;b9z=1e>>*DnrDQqU
zWDk!<TW%2}x6Lfg2~F^5$Dn^b=G-#1l`78ZRMwdR57iKZeaFU4LgJ%;yAVqLb}^n@
zesSC>ylFkb8fVY5s?jpGw5~sbNgI;vbox+Y|9e2_T90q4kN=q0BQM?S+p0Qn&5KK;
zih2t(r@MsQ!Rua8lz%ARpA<v#zamqVimgaf5^Wm}@<S!@NS4%rZQaH^QX<=kMMap&
zy|vYq^Q!QR!qqmXTjOwF4#KLp;>}L>JD}`3x2l{A{l7!~`#6-i&8iZL){5g*Y`)PC
z%Oq`1S*I)?IjdGVsNT_&qWh_MWPor8a+hc|Du=|^uy4t#-z}lTFB1Y>1oVJ(qIGeg
z<)r6}`TLVU)7`Zb+t076@BwT-nXIws#-S**V2u&pI!?RGY(6+rW>|Zn^#Ot@6rn$I
z{3%{))p>tzvF3;N3?msdJuChX8?_QHaqjKkTgK72Y0g4bE+uCZG$6h#WC7n-L31G}
z-kEI*8yF+i2tu!F0;7eorh)aGA+34hua`}U>jeViTy6l%6IHz%YGqAVI7mt1TBubM
zms-2sS`5u6-WW4g;as}Ll=XAYrMv-61@xa3A)c=d4dqIE3!<^HRjg<<-MnJ{6Y_r(
zu%VK#bd)ryu(8tRte12z2DWwC$GUX@KWLbdKhn~Vbo3%yyCf9{vW)>oPKBd@qvMIQ
zpte}EeXubFTl_zptqDPL_J_ynDsqgYt)h0o+_)fmghp$KVsf)tmmZznfE5Q-M^Gng
z^2q{epeHETEmM)cfAi|)=2g`W;wl9-ww0h*Nfo68rZPzu-E!>!(hsx0JafnujpTd9
z`8?$~7X^2G5Yr<W%RWJ!ZnO*mJ$($pjE5#T>ZhI<4WEX=`p7b0y}Z|?6OlD(X=64`
zIq8aL7uhlnxG*2};}X*v^!1F-$FS<<n~<(h4gRk@ri_Fx9z9sDlk#~Kc$n{~i>}~n
zt?IC(6lam6JS?Wwlr0#WEXVVDKxVWBW1OJ8BWaXm-0KN46X%%*&SK^{B+R6`h^-`V
z`|F8Ode`vuNwjYD+G+P_JUVjR&99v#PyH{2?~Z@(11B0%ysJ$uXXfUwy`3Py|CP!5
uw@yxq&TZD-JYhb?Cx43W!~0V+Z)|%PwdQ^L|8@7I&21#tecxY!npB0SZQx7*

literal 0
HcmV?d00001

diff --git a/.github/osv-patch/g02 b/.github/osv-patch/g02
new file mode 100644
index 0000000000000000000000000000000000000000..b08bb25aaf16a56a534c991144249ef4d22adc5a
GIT binary patch
literal 3000
zcmV;p3rF<8YA^&q>R2RjElqKE8B0rrpyZMv6bd8;A}kQV;*dn6P~~5fAC_N|e(&}1
z`Wg(iQeww;S;S0tPam(}ebDpG5^+-w7goLf<?8B{y49C2@GrYHdU&hWzisC0+<p)2
z2lG3>q@O9g1{CYNYQ<dLohwz&!z)!O*?3&#caJW*Zw8P$NAPF2>-A#QK0F*QCg9MX
z0c3oHtP7_nr@x#Hy5j#{o($fcU3SkeeuWP3?mu6jUA`Us@#O0CmqGXZFW|D(90(};
z?$J-V;2!>Cg~Fja-yTC8h75^)?@QxPN{-rn_jUil9$jy^TjNW{V@*cPSxcs!Xjd3o
z%d)H=_y3aOYoQC6$~w_zTaC{tl>}=!o_x+nN&y+2M$n@yvKx8>E><5;SwcWNu?L%i
z$?MT(Ryf!5%Nz${b;SA+Z++7=aE8k9O-03Mw>P`3Pb3KeP<un%9Jk~>o@$c+{9gVG
z7exllKC(TI3!(}l5e0Ob0P@H=wkrnw-BAp&^<h*k+&JgEu>?lJq+3X;wxs}xN+R|H
z{=wx~u3WySeIPsK9VF+u#uOe-KFTEc^^WxJR}MV^Rg|OSqSQ-ZhZXD;{-~O*N72pv
zByLW@ay5jCQi(aXJ7!=C%u(zLo72s70y!x<?9gBZ1M`!4ge>zhWU7>tHOf44O4t79
z%J-a&*`e>)tOx@%o7JEQaCb{mD;=m41~5=LSE$<n!-_yAbY|%|yGcLq0g#UHve+%N
zUBs2Ec2$nijsmlRbV+*@c&j1W_FIQHBw<=Ww)&7+wZz+Se2Mze*&d_^*<a_AnKUHJ
z=e1p;<!trL7xfVn(|AAOp9U$5aVyrqHrB4~GWG%co%{|Ys2lT9L750k&qtXx2ilgf
z;4gP6AncDJVy3>O2~0-2kkn5v6=e!ENMgBqLZgk7KY2;0?-2>ncO)$Bew4qpQZP7{
znfX?p&#tXTk~DLdZE*t&)~3j0Xl<_-@0UY?+%Wg;Y(A?G$72d=(z@bhekZODW(hMp
zfyi$(zu90C^C8~!I;MNfM^f5@(?nre=OV}Kc$jTW?#?uqUeT+{W+sHln_GC6C27=;
z$G)vPI6~h@hB`fZg}2V3{^+$xGf+Bg!qq~m%|8o3v~A_`yAMaZj#6a!N!+OaO`V7i
zppDbKadJLGoXJujZ((8pbE5AqsZnU9_&a9K5erk=25AitPozb|PM}u9@VC(Z70>bY
zOs43|`8;WGyk|J$#5Y~(iD(C3c07JmyKe4gZF6bqy1+d+;LGdAc=^sKWzI$H?B)hD
zjCo5Y(|s|6D%PizM?g=6WS%PZQK7rCtz5!xLEA5Bom`8aKf9h70*M<y3MvpR-A72H
zH9<`Qe6`Ql>mMM?b_b(_`l3xE+MY7@;@wb9xd&gm1$ekD-JOp?%*a7pVlP4iCCfQj
zL&h-phKMZV(ft$fUW8*18PCI6F|Ib0QO9awu9q!hI7k#QTW5D4MibCE!Ve{?BC;LK
zKPXvE_o440T13n?+T1Nx#02uh0-(y7tvjt0)lLvOB*nhUqYCK*1FA`;6XtyELu4jr
z*^VS-3q?iJQ0hA-Z)TI<P<uR}zf6o03&kMGeKokghc(BqyRt6pz^b-jDP3zheTQKN
zsd}BrETh#%icVM5PVBm?<>1%-=5{j!6Bae@$)Vb6%tv15zSDOAxn0HTF+s2nH4zW1
z__|oUFn`tp_Z>zSi_)Koxy9*?MNFk4X2j!~lG)uMO_#u!1hp>qgM+HVxn)3J0dnyR
z0n&6Yw?t}Ix9&T_p58>r^{-0E)$2oT6-|pZ@utC+MWtCRk<nqs1uH8RYP&-iX?3_o
zMPSt(HpNulor41*oCs0<=d-Is@l*1YJzh{n;|u&KYs4TToQz-q$!EBqam|W8%>`OZ
zxLPn8cas%~TBBf58r(GRFs$tQbn*^z?YUh58fZv{Trz{w$pZ&fxS0?$s;{q3YuRKq
zr?_IvR_9-uFVO@&9DjxIk0Jp%mA;S=|E-Xi8h57_EY^?qB8wS<F&P{5=@x7Qa)t~#
zWVUj-TaMn2iRB^JBX2M@ptV9&@>=YQ7S2q(kXm@$Jw-cY31*$VkxVc04obAvmc24@
zv(A`1`zLN7n)~!_;x+S5#P{zdd!j#M+=*UdMoju>DgBVo{4E1sObY+l&-QR%%xA0I
z#y=e6m<;oP5?)<&0jX>gIj-0Z`PWV(8P9>9BJ$}&gkR+Iq|k9&Hj=zBhyy@A<x|8=
z@LNJkZ68)bq+}Lj@Y4`Tcm8=nk~<AwL0f2I#lU=C4-{1HHA3nhd+&||`zq1}?!ezB
z3$;4+c!mANSj3*~bwpR@!<ZZTgLY{mB`G;W!7(oHJ(qMOu|5AwN=WGeZRrPmpSkQJ
zjiXwGT#=__Fh7hZ-jML<h!kiCRiv#J^5N@8xfk!6I=oEis`C{P=$M;Y=*5psm{=4;
z0306G<(3nzMOqUq2A1Pv4nuADcX;HD#$>7u{j%gVvxkhf?$a#CXzM;1NftNY32XeN
zx@0CU9I%jF)?FG!Y*y6x=el!X=eEMk-(cVrSX8Qgoz}hfV-Dl1&3HWd3_U9U{rCSu
zWia47w-*F&JoYuu5w0v)MQ|G&cjwiisIF>)K+;NfTbiF{)Kq_B!5E`$=H!rRmw|J*
z-Y{e0HwrP__5p>7Z2+ZA#{Ov5kvlx7>AlmUz5@z!JK7~r##HGDGRv6Q$+jKX-$5AK
zS>k!XC{vD`b#GibBjaBC4I`5=2O!t?XTM+i?*;@1#cHW6c<wlk`?=aaVoYN`G$u^?
zECpu0e*###DCn6K|6YO5k~~^PZU!pt8Tg@^FaTU-E$GeUxU^atG~dIijzn7-m$Ky$
z)D}UvC$l+@=abkJUkMkQciZ)UQ44XU4ZH$THxLg5I}y=(GsAkT+BjiMk9ZTRVVy1?
zN7Xh7#gG_1Z_V-%2~0;7B0>I|zmN!pUW5#DNzL*V?=||?k^6hZj^EQ<ct+UN3-e{C
z?!R-Q65=A?K*5vT1@1m9_oCN6YBc)1k8OU{7g_OJp}E>-Lk@k;1cCsjJbWZrO^4Tl
zz_*P+&v2+$tVXLr<T-l9Y{J<q+-97S_FhWZQFU;v@Bo~v!Vw5=ZttGy*{?Aaug#|}
zsLSVxi>ZAatC~I}+*e}B&{lE5pKV~oQCWQ)XB`yhW8TFWDg+M-Ha5P&*fX@Lmc!2$
zJ1V#NY$N(FrCJl;V8R0&d#3>;IlVl;IzK&mk-%FsoNv|DY5i3XGX|DOvil=WIe+=;
z;_~X`*Q@e_!%!htoPVuslb09I&n{1{&fw5qo;^Q*{nB<*a)zQNW|l85{#<?@qOpbS
zyixUS526nD&Zm_a8A5E}`0urumtPns{2yH=r7)ENk=Aw4Dz;jQV8X#ea=}RTHSbDa
zG%7pNWi$2wlt&&}Veh~Eqo_SB{GQ{ZT?$2^0coJJ5!f3`CG3(A7aQ_1m=$hsoG*lF
z2q>Q!gBIWFkC?$OGzTB^VdIFN2H(+`2;WLq6Up+6Z4@fRzCGEm?*up?S7qCYuwjjp
z=9o6%_Xjx03;Koe40~g8qne7MpoD$uXFEi}RxZV2sXQarW~s7F-R0}s`ADanx(DZ-
zcFbYhww-w95$4T%Js;gGe;_h%%du-28m;rHGFj6`;X9DCVTaIdNgMi2jdJj)?<i+_
z#<z;qFlG<nzXRWA&uEn$`iDJ-S`&f@bQ~Q>a&iM+Ns!fS2!&56htMG=opg)}$*H)P
z0>bN8_lvw#hu5ooS;rjX&|FpgI&5T*dDC5L=`I2RTQZiQx>Ughj_nv7q?CfcU8($w
z*xTQR?MnBk*{IZ|k0L}mbkPe()v0wPZXz1mP5=&FRmXKJ5G|2bu4obuaMdF7B%LxO
uj|VaucG9vp17k5pw(}X{z)@}inltOK>1Sq}R+UB`1}foTM)NP>HD!MkvB0<h

literal 0
HcmV?d00001

diff --git a/.github/osv-patch/g03 b/.github/osv-patch/g03
new file mode 100644
index 0000000000000000000000000000000000000000..762c4e27b5ec4c7a8cc0925a2d2af4fb1cc9ea59
GIT binary patch
literal 3000
zcmV;p3rF;Yd>bjO4?m?3$;oC#;}--OsfvPrppkha<BCS3M)T&Vk!6i1t>dG|*9D~|
zSl>Xn5qk?EN6(;~#IwD%&SHfooB|2z9V?IbrSUd<3Q9abd;a?L>ipu@ZgDY*Q(fFJ
zWwo<YD`IDwUt&$*VDwJ328A!srx73SuTiB!h{-n_Eao7)$;9c;&%38DF1oKT&jx=w
zd;8~$%jeyc3Y)c{%*64rIA8ITqE%keSeKNnp9WB$7hE|_z-FPxlU#6RG8xqX3PsPC
z_Z_rAs!A(Z(`$hByky@qdUhoql^R3fi|G(%z{`b|pU0zMuJ$-9v3D#l+NMBvyMJ*L
zF&R_J151FG4$y&<e0&Ti`S=-~By=lCq%TW0u^=P6I0z-w@C>k_re3w6wqP#iQ<<S4
zec-m2szDOnXLo+MSs`$SG}b^i#Xp&xTeW7Djl)+HsQ9=9X#<g911h;bdy+PrCAQej
zCYtic5|F{guw(s_t!h+mkLBi<p~EKPqxU^3UDWTi^1Ye{dj!{ZI$uFxsIFuYy9vrk
z#(yDrX>IiJy<V}C`<QnrT7@B}U%DRgG!hfz%t?9g%5&BM9xMCI9->iSZl*bUkdb~}
z5{nFie%)u3u~8l_7Flg#g`Z~Yaj6>{M8X~K34<~V<#w!JAz0){wG(`rS{^D7D0xv-
z=EAudhy^?JkG=~PSrG{_T<gh`^hjU8f>L0<x@eYv^7O{YctZuO_TDlZFp)>`iiu1{
z@f;`2Z=+tZ9&0@he`o?1Y`umuY>0Wp0tPH2ZPeexaueqxi=8SMxlsMZhTp5C;h6=#
z$!-~IUf|63PS2KOcr-Dq$f}J_juJYpBzO5}vJq3a(&dwQW5kC2U$B&}rVw5@G7anX
zRzseB97)!PqY)@G10F~5s5EuQBDt)_$yRT}!DMt$+qKyPd1T`0kL;;DGjzQTjd*Da
zOT8aXK&<)@h;?(nixDd2KfNdTOS1*~x)FLxP(P_}ih9^~3l{2gsszqyuheIX$i?M9
ztBtA-em%Z^d^{AAV1C>@Dy)ef93?Ij+U*cCHxV&6sm48^<xru!s;d5FF=SBs8OsZ{
zRh>b%9vndesBa+tQy0sF-@A9SuH;m=#IlMf3Ga4li3(dz&fKQD+;E#*dt@~vi*O3q
zGV&n}$(nL@4_fkY(&W-{3v&8;^b-bn<8r>dhs)l$>j8<?>4GI-VBnv0(69ZPo{HP}
z9VdYDgfcwU>Z{=_pH`*S7qnXIY2Hx<Hf3o%v1!BEi0X#cWYIm8G>?wb*3mbE5<$V>
zm{?&qTkf>4AU*?~?qE6pRE1yCZ5jU@L*eI7^W_IjsE3a%22Wr&`yp_6J6`q9-Zp|C
ztz-%xVmrz-fjk9~s#V%==~}=l^ZAr|bvyqwAPuUFc%mPJ)%qTWxE2V_N+9XD>%h+3
z%%_{XSvBbzvi4~*THkh>jgmb<DR%x`_iG)O?DxvId=)kSiR>OFSL3C+wEbxJ91VHq
z-lJn;_w3Et<@wdyLHFwIi?eRek`?-K*F7~Q0KE|9>uvE1yZ+XeKFHoJ&Ct8vp=uVQ
zpVFD9fL8MwR@^5@QOcrNapRJSO`Sk|v{hq~84RsYiYDP)D_?Nh6;NpVmbpk#6K@B_
zF;uX|pm67UF~&o6DSxBvq4(b-iwRf@E@FlMKL}UZD{fFK>(ubLnU6-{8hd+&X9=jD
z{J#8CrAp*Iyu`4!s^Jo3yA_tp;H9Gmf<6s|@VwxK*w%N8fs>(+`AX~8mBUcAvl@>Z
zHSozyY&Hys!f#+SIJ`GH4CkmI@CM>Ywvl|3JSZm_<#%(quB;kRGizjxWS7QDu<$}3
z)A?w)y2TOM2*+9TY1S$`#*etyhl>yI-EmskQFdH%l;NTEQ=IKg+|tR%+#R%${SaAR
zLDUg<NpnMYZF66#`mPFGYOLf5DhlFR=$zDZ7FlwF%pfHjDEO&b4uB3GQfdySW@<2m
zyRb7!)j90##P&Q@`yA^8_<uONuj=(-_8)}C;L>Wb+dH34@5L|JXPIquF_}H+zVg~I
zR2?vUT@z`(UUfRHtSJ`vZZ@6{S0Db+X}z00|Lbt}e%^!3=d)J7(>cmoS>xX-a!M+n
z%pWQTM+fgL!}321G^tT-ZI&w1l1TIKiom6bN1uioj&P&kFWe&CY8N|TDt;)F$^&Ya
zx#b^*lUW7D$nhTZRCr6j|8Ay|XH!<dqvYMpBvBU_vh_G?iDw6XAis5d)*M)6#Rp9R
z%qRBu8(A|uJ{He(x^|P(T;&H8EW_>Q8p^UBE;p-neJZy7P$wg=BiY9llm$g=EwY$n
z?4}SF79fkEEjS6d+V5uXW;%iOyIJM^9A=fxm+uchA7TpEj}3up#Ko$ahHN3@`TX#D
zxU75>2ap~8bKWC!6BKBr8ld7BmSvHb0Fi1ii1+##n|r&A^d2{Qe_wC&u`}+!)j7tf
z>NKd{vr_D6^VySUN6q0rcGORS+I)Ka^;ytZHqvjL610Rbfyp$L>THWqZvu^IRT!GC
zmYiB?G7+POYc5L%l~~QLSgkIf)~1zaqzs8m@dcrW1kq4Ep3(_W=IRwhf=*_5mMUlq
z$pl4a71M~Dq48I6Qzi!;>2#RA$&oo8e#ps9uliMd^NRCq;*6Ev7(S@Jr9a~sIYbjy
z{g_9eyG9s!^#dM#!3cPazsIIM9lYN6++{(BDBsqAd1wVItWpN?2%E2B+uNZqXe~0y
zxMtC43$`M`=>Pmn_oO})|EXV#|I}~9f0A8apf5LmxJ{3uf`&7GKh`c##A_GaV!0u`
zM&Hdi(2-Md9Y<+{_*MiK{OWD@?6lr$v>NrMSgH7L0VITW$1i~rJD7qk4oRgdwn|Jk
zIel|Ra})@^ne;==RSZ=dc<#ITI<J6FpP=0N%?9py@Ed-x2?&1L=+>5T6T9I2ln;Lt
z#<m5e)p)WCp4LKBdP~?Yf->cMj)y9J!0CWz>!skSZg7eTh_B*X<d}_eGD_^?#3N(x
z{Kx&cu<OB!1z0g42?1ehon=>S&TIr>bCcC-lP5dZWAX&Ahd5yJniP}JnT=Sk*-nLX
zqJkdODW()vEmq7dIEdS+htZuxkv*;aAdN>&M~zey$os?I@XZ1$-J$HgPDUM^Q-@`Q
zWlCh03rf=qn?;qlp(j<d7Aq;&g9xG*zID#d_pL!?e}Qncx)|_#APmUw;G{|wGpI^{
zOYNDPh3jOMWiko-W0;&&c!Sz-Oh3{|eDMwlFswFlPmyL0#Q!Lqc?uj?A(<q)<!~dk
z0Dy(TWHp$N$H<%j-yzwo!QF7N5{P|3GTL57Bm&+ZXtQ1Z{YphA4JIi6g1D9C@dI?z
zXg#Snp4MB>t{ROt{_iizK4qkLlx=m6u%AhgsCqsoaiyjisa=Sx8QsFxMaY<;F0!dX
zkILSxyAPm9IvQ|S9&vvaEoA^fM$w{RnF!}mdhs-j?0k>D;(XM#2O%gs2vT-ZLqad<
zZ-*Qdq**p69PMHmmw0h4Bb``%69&A1JNQ^=8*)&D3?`7MVvK?bxG3hMZ;T8Mw%)}~
ze)!>sWOoqEJL&r~ePx*N9Gm>O47J5Y33YMP!KF%c4QE*oauJCN>Y%YOaXuVIQj4Q>
zI;>B(xz0_h^XdS)mpMZIAK`Q-Eo%^im&MRu1ws9z0HmGS=gUD5yiun)NHR7QRtO{b
zz&M?t+Y4Em2e<(nAwp?Z1N0zeR2)iYl`k_Gn5nK#r<2RgOq`z19%^ZqhKq&PmMs>l
zjdaOzAX+|6tTr;Uu2LVXo}&5X*~#;lXW5;jKvriO!BKpKVw(*P)af8-#Io&j#&rMX
z{71f*an4Er(O2ZI^k}6yEZw6dmv#E$94fr!@0UZWV~=9u?_;r|LjSj9ujZTeV&h&C
u>1V<~OD6v7n5$T=WrAGIKk!uC;`Xr*JNk(PFoU~A7)ei;#jWO;)a!r%{?-cs

literal 0
HcmV?d00001

diff --git a/.github/osv-patch/g04 b/.github/osv-patch/g04
new file mode 100644
index 0000000000000000000000000000000000000000..7d3a6e30e2801bfff5880e528f42ad41bb0d146e
GIT binary patch
literal 381
zcmV-@0fPP~z0g*JYZAYQ=RoGPkT}=tr)Bfd1gU(9--*)4dZPsca>XZbr$gh@o6rXY
z+N}o$yPdqh<q!Ko`CJBZ3kg>sY0yfMa7f3A*wPATrCF4yrl5z1F?!zJ?4z;}QavK4
zYG1FY^~H)04L+9!m#5=K<M?SK%bty&J#Dszwoh=lr)Pz6B14<aR(e!<g#WaZW2Yu=
zNYREEti9rtPLPZoL*U|ct+Ma#z>N_&kgf&-gEsA@9K<A4^`&1{!3j6476-}Q&7v;;
z1eV}{CD>f8N0=1aBIULh>p(`ut&oC8WTX-#{o%$Yzw3U3li#N>fK_n`maX{9sJ%+j
z(1{wE92RiDnTfLnNid_i_*!9_t+3*t%8`tm9eY62WDn$g%@a!x$6J!x!6So40aq$h
zmW7+bfn+AIMIKyXM3?qbD2U{;(}~A$Y1qLXm3-<Op&p(Gv}kXC&+4TejpAB@kejb|
bdJj!ubu(Y)m463B`Q85j+-guvV#xpi{a(Q7

literal 0
HcmV?d00001

diff --git a/.github/workflows/apply-osv-patch.yml b/.github/workflows/apply-osv-patch.yml
index 1e285e9..3d29d87 100644
--- a/.github/workflows/apply-osv-patch.yml
+++ b/.github/workflows/apply-osv-patch.yml
@@ -24,12 +24,18 @@ jobs:
         with:
           ref: agent/osv-dependency-intelligence
           fetch-depth: 0
-      - name: Apply verified development patch
+      - name: Reassemble and verify development patch
         run: |
-          gzip -dc .github/osv-apply.patch.gz > /tmp/osv-05.patch
+          cat .github/osv-patch/g00 .github/osv-patch/g01 .github/osv-patch/g02 .github/osv-patch/g03 .github/osv-patch/g04 > /tmp/osv-05.patch.gz
+          gzip -t /tmp/osv-05.patch.gz
+          gzip -dc /tmp/osv-05.patch.gz > /tmp/osv-05.patch
           git apply --check /tmp/osv-05.patch
+      - name: Apply verified development patch
+        run: |
           git apply --index /tmp/osv-05.patch
-          git rm .github/osv-apply.patch.gz .github/workflows/apply-osv-patch.yml
+          git rm -r .github/osv-patch
+          git rm -f .github/osv-apply.patch.gz
+          git rm .github/workflows/apply-osv-patch.yml
       - name: Commit atomic 0.5.0 update
         run: |
           git config user.name "github-actions[bot]"

From e121ded2a7273089c2a0892cf3a224949cbc21e4 Mon Sep 17 00:00:00 2001
From: ORANGINGS <30224momo@gmail.com>
Date: Tue, 28 Jul 2026 12:21:43 +0800
Subject: [PATCH 4/4] Capture atomic OSV apply diagnostics

---
 .github/workflows/apply-osv-patch.yml | 25 +++++++++++++++++++++----
 1 file changed, 21 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/apply-osv-patch.yml b/.github/workflows/apply-osv-patch.yml
index 3d29d87..75cd1ed 100644
--- a/.github/workflows/apply-osv-patch.yml
+++ b/.github/workflows/apply-osv-patch.yml
@@ -25,11 +25,28 @@ jobs:
           ref: agent/osv-dependency-intelligence
           fetch-depth: 0
       - name: Reassemble and verify development patch
+        id: verify
+        continue-on-error: true
+        shell: bash
         run: |
-          cat .github/osv-patch/g00 .github/osv-patch/g01 .github/osv-patch/g02 .github/osv-patch/g03 .github/osv-patch/g04 > /tmp/osv-05.patch.gz
-          gzip -t /tmp/osv-05.patch.gz
-          gzip -dc /tmp/osv-05.patch.gz > /tmp/osv-05.patch
-          git apply --check /tmp/osv-05.patch
+          set -o pipefail
+          {
+            cat .github/osv-patch/g00 .github/osv-patch/g01 .github/osv-patch/g02 .github/osv-patch/g03 .github/osv-patch/g04 > /tmp/osv-05.patch.gz
+            sha256sum /tmp/osv-05.patch.gz
+            gzip -t /tmp/osv-05.patch.gz
+            gzip -dc /tmp/osv-05.patch.gz > /tmp/osv-05.patch
+            git status --short
+            git apply --check --verbose /tmp/osv-05.patch
+          } > /tmp/osv-apply-diagnostic.txt 2>&1
+      - name: Upload apply diagnostics
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: osv-apply-diagnostic
+          path: /tmp/osv-apply-diagnostic.txt
+      - name: Fail on verification error
+        if: steps.verify.outcome == 'failure'
+        run: exit 1
       - name: Apply verified development patch
         run: |
           git apply --index /tmp/osv-05.patch