Close security alerts and harden automation

[kalepail]

Summary

• replace the polynomial trailing-slash expression with a linear scan
• remove the obsolete relayer lockfile now covered by the root workspace
• pin CI actions and add the relayer Worker type check
• add full-history secret scanning configuration
• clarify the remaining optional wallet dependency advisory

Verification

• 458 SDK tests, 4 indexer tests, and 39 relayer tests passed
• builds, ESM verification, bindings parity, pack dry run, and dependency audit passed
• full 142-commit gitleaks scan passed
• actionlint and git diff --check passed

[Copilot]

Pull request overview

Hardens security, dependency management, and CI while improving relayer portability and URL handling.

Changes:

• Replaces trailing-slash regex processing with a linear scan.
• Consolidates relayer dependencies and removes Node-specific test buffers.
• Pins CI actions and adds secret-scanning configuration.

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/relayer.ts	Adds linear trailing-slash trimming.
src/relayer.test.ts	Tests URL normalization.
SECURITY.md	Clarifies affected wallet integrations.
relayer-proxy/src/index.test.ts	Replaces Buffer usage with Uint8Array.
relayer-proxy/pnpm-lock.yaml	Removes obsolete workspace lockfile.
CHANGELOG.md	Records security and maintenance changes.
.gitleaks.toml	Configures targeted secret-scanning allowlists.
.github/workflows/ci.yml	Pins actions and adds Worker type-checking.

Files not reviewed (1)

• relayer-proxy/pnpm-lock.yaml: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 8 changed files in this pull request and generated 3 comments.

Files not reviewed (1)

• relayer-proxy/pnpm-lock.yaml: Generated file