·
7 commits
to main
since this release
Fixes background fetch authentication.
- scripts/fetch.sh now authenticates non-interactively, exactly like the server does: temporary askpass helper, short-lived token file, GIT_TERMINAL_PROMPT=0.
- GitHub App installs mint an installation token for fetch; fine-grained PAT installs read the allowlisted token path.
- Static security tests assert the new fetch auth behavior.