What's Changed
- fix(zb_io): skip libexec/ for Python virtualenv kegs by @pmnmq in #383
- Fix/shim resource patch checksum verification by @cachebag in #388
#388 includes a fix for CVE-2026-53970: verify SHA-256 for resource and URL patch downloads in the build shim before extract/apply. Reported via VulnCheck coordinated disclosure (Khushali Dalal).
Full Changelog: v0.3.1...v0.3.2
Contributors
pmnmq and cachebag