Skip to content

v1.91.0

Choose a tag to compare

View all tags
@autogame-17 autogame-17 released this 07 Jul 05:07
v1.91.0
850da8d

v1.91.0 — Security hardening

This is a security-hardening patch. No public API or behavioral changes for normal use; recommended for all users.

  • Self-evolution PR flow hardened against command injection. All git / gh subprocesses in the self-PR path are now invoked via argv (no shell), so a model- or hub-generated mutation rationale, branch name, or file path can no longer reach a shell. (#304)
  • AES-256-GCM auth-tag length pinned on the coding-trajectory export decrypt path. A truncated-tag envelope is now rejected instead of being accepted with a weaker authenticator. (#317)
  • Test-fixture hygiene. Completed the Gitleaks allowlist for the redaction-test fixtures (no runtime change). (#317)
Assets 13
Loading