Pin faraday >= 1.10.5 for security fix

[mokagio]

Summary

• Pin faraday to >= 1.10.5 to address security vulnerability
• Faraday 1.10.5 backports the fix from 2.x to the 1.x line

Test plan

• CI passes with updated dependency

🤖 Generated with Claude Code

Posted by Claude (Opus 4.6) on behalf of @mokagio with approval.

[AliSoftware]

I tried to @copilot address the PR comment from Danger but apparently GitHub doesn't give me the option to ping Copilot (I don't have a Copilot subscription… but I thought many of us don't either and that it included org-wise instead?)

So maybe we'll have to address the missing CHANGELOG.md entry manually… or better yet, iterate on your agent's instructions to tell it to consider doing that for repos that have a manually-maintained CHANGELOG.md, and also tell it to check the Dangerfile for rules and account for them when creating the PR…

[AliSoftware]

Change looks good but as Danger mentions we need a CHANGELOG.md.

I'll leave this as a comment to avoid accidental automerge and instead let you use this as an experiment/testbed to improve your agent's instructions

[mokagio]

I ended up doing the changelog update manually — can you believe it?! — because I'm going through GitHub notifications.