Skip to content

v3.6.181

Choose a tag to compare

View all tags
@marcusquinn marcusquinn released this 08 Apr 16:41
· 11360 commits to main since this release
v3.6.181
ca9f900

Security

  • Lock issues at crypto-approval time to close prompt-injection window between approval and worker dispatch (t1931, #17880)

Previously external contributor issues were only locked at worker dispatch time, leaving a gap where non-collaborators could add scope-changing comments after maintainer approval. Now approval-helper.sh locks the issue immediately after posting the signed approval comment.

Assets 2
Loading