RayPals/Claro
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: require exact package manifest checksums

Browse Source
This commit is contained in:
Hermes Agent
2026-09-03 22:31:40 +00:00
parent a9237346fa
commit 0556a3610b
7 changed files with 22 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+5
View File
@@ -1,5 +1,10 @@
# Changelog
## v1.18.26-dev exact package checksum validation
- Added package-security coverage for a manifest checksum with valid digest text followed by extra data.
- Changed `claro package doctor` to compare the complete `checksum:` field instead of accepting a checksum as a substring.
## v1.18.26-dev exact package manifest-name validation
- Added package-security coverage for a manifest name that only starts with the expected package name, such as `name: math-tools-extra` for package `math-tools`.