Skip to content

[codex] Tenderly local/admin boundary#1252

Open
rossgalloway wants to merge 5 commits into
codex/reconcile-vnet-portfolio-impersonationfrom
codex/fix-yearn-fi-group-tenderly-local-admin-boundary
Open

[codex] Tenderly local/admin boundary#1252
rossgalloway wants to merge 5 commits into
codex/reconcile-vnet-portfolio-impersonationfrom
codex/fix-yearn-fi-group-tenderly-local-admin-boundary

Conversation

@rossgalloway

Copy link
Copy Markdown
Collaborator

Summary

This PR contains the grouped remediation branch for Tenderly local/admin boundary from the vulnerability harness fix workflow.

It consolidates fixes for:

  • merged-tenderly-admin-browser-origin
  • merged-tenderly-chain-shadowing
  • merged-iframe-wallet-boundaries

Supersedes #1244.

Notes

  • Group branch: codex/fix-yearn-fi-group-tenderly-local-admin-boundary
  • Head commit: 3a148345
  • Base branch: codex/reconcile-vnet-portfolio-impersonation

Validation

  • Grouped branch was cherry-picked and conflict-resolved locally from reviewed fix workflow outputs.

(cherry picked from commit 65f8f81f989fdbfd2e5e83d058440fef9d42969f)
…owser or

(cherry picked from commit 4f6657030d797b3e2e6f077ceb14e871b7f94951)
(cherry picked from commit a12cad66859e42746501ae260019a5a8fcc82d2c)
…n bo

(cherry picked from commit 0850bb75d238ce8289348c18152b3b9bbd642090)
…sion/ori

(cherry picked from commit 0556f7da95470297ae16bac305ffe7af3b82b6b3)
@vercel

vercel Bot commented May 21, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
yearnfi Ready Ready Preview, Comment May 21, 2026 5:50pm
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
yearnfi-nextjs Ignored Ignored May 21, 2026 5:50pm

Request Review

@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant