fix: comprehensive security and robustness hardening for registry feature#407

Merged

RobertLD merged 14 commits intomainfrom

fix/registry-audit-hardening

Mar 18, 2026

Commits on Mar 16, 2026

fix: accept ssh:// protocol URLs in registry URL validation

RobertLD
and
claude
committed
fix: harden registry config validation and file security

RobertLD
and
claude
committed
fix: add path traversal validation, semver check, size limit, rollback, and dedup to registry publish

RobertLD
and
claude
committed
fix: verify pack checksum before installing from registry cache

RobertLD
and
claude
committed
fix: harden registry git operations and sync locking

RobertLD
and
claude
committed
Merge branch 'worktree-agent-a09c3d7c' into fix/registry-audit-hardening
RobertLD
committed
Merge branch 'fix/registry-audit-config' into fix/registry-audit-hardening
RobertLD
committed
Merge branch 'fix/registry-audit-publish' into fix/registry-audit-hardening
RobertLD
committed
Merge branch 'fix/registry-audit-checksum' into fix/registry-audit-hardening
RobertLD
committed
fix: address QA findings and add comprehensive audit tests

RobertLD
and
claude
committed

Commits on Mar 17, 2026

Merge remote-tracking branch 'origin/main' into fix/registry-audit-hardening
RobertLD
committed

Commits on Mar 18, 2026