should bulletproofs++ still be listed on getmoneros roadmap? if yes, "ongoing", "upcoming" "proposed"? cc jberman kayabanerve

<neptunian:unredacted.org> Hey all. This isn't as related as I want it to be, however, this is important. Please read.

<neptunian:unredacted.org> Github Workflows are soon to be exploited. The fix is to temporarily turn off pull requests with workflows. It can drain env variables to a tunnel via the workflow.

<neptunian:unredacted.org> That or have pull-requests not be approved by default. It works when the workflows yaml file includes

<neptunian:unredacted.org> "on: pull_requests"

afaik it does not run for new accounts anyway

<vtnerd> Yeah luckily many (most?) don't have secrets for on pull request actions

<sgp_> plowsof: afaik no, it can be removed

👍 thanks

<chaser> does/could Carrot do away with the issue that the tx_extra betrays (via ADDITIONAL_PUBKEYS) when a multi-out transaction involves at least one subaddress?

<chaser> monero-project/monero #9351