Affaan Mustafa d9331cb17f fix: eliminate command injection in hooks, fix pass-through newline corruption, add 8 tests ...

Replace shell: true with npx.cmd on Windows in post-edit-format.js and
post-edit-typecheck.js to prevent command injection via crafted file paths.
Replace console.log(data) with process.stdout.write(data) in
check-console-log.js to avoid appending extra newlines to pass-through data.

d9331cb17f · 2026-02-13 02:22:55 -08:00

History

..

ci

fix: reject whitespace-only command/field values in CI validators, add 10 tests

2026-02-13 02:09:22 -08:00

hooks

fix: eliminate command injection in hooks, fix pass-through newline corruption, add 8 tests

2026-02-13 02:22:55 -08:00

lib

fix: clamp getAllSessions pagination params, add cleanupAliases success field, add 10 tests

2026-02-13 02:16:22 -08:00

release.sh

fix: harden CI validators, shell scripts, and expand test suite

2026-02-12 14:11:33 -08:00

setup-package-manager.js

fix: resolve ESLint errors and update tests for project-name fallback

2026-01-29 02:58:51 -08:00

skill-create-output.js

fix: clamp progressBar to prevent RangeError on overflow, add 10 tests

2026-02-13 02:01:57 -08:00