| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
fix(review): pin GitCode security redaction, unify contract sync rule - the security job runs gitleaks --redact=100 just like the mirror side, but nothing pinned it: stripping or zeroing the percentage would pass go test silently on the GitCode platform (test review parity finding). Pin the exact value with strip and zero mutations, mirroring the mirror-side recipe - 5.4's closing sync rule still said only the trigger surface requires a contract update while the GitCode contract now covers eight dimensions; unify it to any trigger surface or structural invariant on either workflow, dropping the enumeration that keeps needing updates (docs review) Refs #627 Co-Authored-By: Claude Code <noreply@anthropic.com> | 10 天前 | |
fix(review): reuse empty config dir in system auth case, keep single trap Bash replaces same-signal traps, so the second RETURN trap added with the mirror section silently disabled the first one and leaked the unauth section's temp dir on every read-suite run (found independently by three review roles). Reuse the existing read-only empty config dir instead, restoring the single-trap pattern the other case files follow; verified zero temp-dir accumulation across a full read-suite run. Refs #623 Co-Authored-By: Claude Code <noreply@anthropic.com> | 16 天前 | |
fix(script): verify-remote-facts uses encoding=utf-8 for gc JSON output | 2 个月前 | |
fix(install,doctor): close channel-detection gaps from the fifth review yarn v1's Windows default global layout (%LOCALAPPDATA%\Yarn\Data\global) never matched the yarn refusal — the marker comparison was case-sensitive and lacked the Data segment, so yarn symlinks fell through to adoption. All channel-symlink surfaces now match case-insensitively (error details keep the original text) and yarn recognizes the Data-layout variant. bun global installs (~/.bun/install/global/...) adopted the same way; refuse them like pnpm/yarn with "bun remove -g" guidance. A project-level pnpm .bin link got the global "pnpm remove -g" advice; the store-layout hit now says to remove in the owning project instead. isPnpmEnvironment aligns with the installer's marker set: a realpath fallback recognizes custom-named PNPM_HOME roots via the global/<ver>/.pnpm/ store layout, so shell-invoked global bins are no longer misrecorded as npm-local. uv and pipx console scripts get their own uninstall guidance (uv environments often have no pip). The Python wrapper lower-cases the uv prefix check (custom UV_TOOL_DIR casing). doctor scans every PATH directory for leftovers — an interrupted install leaves temp files before any gc entry exists in the target directory, which the candidate-based scan missed. Fifth review P3 backlog, issue 607 items 1-6. Co-Authored-By: Claude Code <noreply@anthropic.com> | 1 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 10 天前 | ||
| 16 天前 | ||
| 2 个月前 | ||
| 1 个月前 |