fix: require exact package manifest versions

This commit is contained in:
Hermes Agent
2026-09-04 00:34:32 +00:00
parent 0556a3610b
commit 7a60af32bf
6 changed files with 17 additions and 3 deletions
+5
View File
@@ -1,5 +1,10 @@
# Changelog
## v1.18.26-dev exact package manifest-version validation
- Added package-security coverage for a manifest version that only starts with the supported version, such as `manifest-version: 10` for the current `manifest-version: 1` format.
- Changed `claro package doctor` to compare the complete `manifest-version:` value instead of accepting a version as a substring.
## v1.18.26-dev exact package checksum validation
- Added package-security coverage for a manifest checksum with valid digest text followed by extra data.