chore(canvas): upgrade node:20-alpine → node:22-alpine - #2018

Closed

molecule-ai[bot] wants to merge 22 commits into

stagingfrom

fix/nodejs-22-upgrade-canvas

Commits on Apr 23, 2026

fix(handlers): F1085 rm scope concat + GH#756 ValidateToken terminal guard

authored and
Molecule AI App-FE
committed
e5dff54
chore(workspace-server): add golangci.yaml disabling errcheck

Molecule AI Core-BE
authored and
Molecule AI App-FE
committed
ce62b82
fix: F1085 rm scope concat + GH#756 ValidateToken terminal guard + CI test fixes

authored and
Molecule AI App-FE
committed
230ba70
fix(handlers): validateRelPath detects traversal in cleaned path

Molecule AI Core-BE
authored and
Molecule AI App-FE
committed
0023077
fix(handlers): validateRelPath checks both raw and cleaned path for ..

Molecule AI Core-BE
authored and
Molecule AI App-FE
committed
a208544
fix(handlers): simplify SSRF disable in setupTestDB; fix Windows path test

Molecule AI Core-BE
authored and
Molecule AI App-FE
committed
5506b2a
fix(handlers): add empty/dot-only path guard to validateRelPath

authored and
Molecule AI App-FE
committed
dacbfc2
fix(CWE-78): scope cat to exec form in ReadFile (templates.go:296)

authored and
Molecule AI App-FE
committed
207d01e
test(handlers): add 5 TestKI005 regression tests to terminal_test.go

Molecule AI App-FE
and
claude
committed
8a4402b
fix(handlers): restore missing callerID declaration in HandleConnect

Molecule AI Core-BE
and
claude
committed
235c93d
fix(ci): address golangci-lint/CodeQL warnings across multiple files

Molecule AI Core-BE
and
claude
committed
12cf176
ci: trigger CI for linter fix validation [skip ci]
Molecule AI Core-BE
committed
814c4c1
ci: trigger CI rerun for linter fix validation
Molecule AI Core-BE
committed
8331de8
ci: force CI retrigger for PR #1886
Molecule AI Core-BE
committed
1bfa88f
fix(container_files): restore deleteViaEphemeral security order and rm scope guard
Molecule AI Core-BE
committed
d1cb1c1
ci: force CI trigger for security fix
Molecule AI Core-BE
committed
334a874
feat(ci): add workflow_dispatch trigger to enable manual CI runs

Molecule AI Core-BE
and
claude
committed
87148cb
fix(handlers): restore canonical import ordering in terminal.go
molecule-ai[bot]
authored
f14a86c
fix(test): restore ssrfCheckEnabled after setupTestDB and opt-in in ssrf/mcp test files
molecule-ai[bot]
authored
9ea648d
fix(tests): update F1085/KI-005 test mocks and documentation test
molecule-ai[bot]
authored
8c2208c
fix(tests): correct ValidateToken mock — 1 SQL arg not 3

Molecule AI Core-DevOps
and
claude
committed
c99476b

Commits on Apr 24, 2026

chore(canvas): upgrade node:20-alpine → node:22-alpine

Molecule AI Core-DevOps
and
claude
committed
2023fc6

Navigation Menu

chore(canvas): upgrade node:20-alpine → node:22-alpine - #2018

chore(canvas): upgrade node:20-alpine → node:22-alpine#2018
molecule-ai[bot] wants to merge 22 commits into
stagingfrom
fix/nodejs-22-upgrade-canvas

Commits on Apr 23, 2026

fix(handlers): F1085 rm scope concat + GH#756 ValidateToken terminal guard

chore(workspace-server): add golangci.yaml disabling errcheck

fix: F1085 rm scope concat + GH#756 ValidateToken terminal guard + CI test fixes

fix(handlers): validateRelPath detects traversal in cleaned path

fix(handlers): validateRelPath checks both raw and cleaned path for ..

fix(handlers): simplify SSRF disable in setupTestDB; fix Windows path test

fix(handlers): add empty/dot-only path guard to validateRelPath

fix(CWE-78): scope cat to exec form in ReadFile (templates.go:296)

test(handlers): add 5 TestKI005 regression tests to terminal_test.go

fix(handlers): restore missing callerID declaration in HandleConnect

fix(ci): address golangci-lint/CodeQL warnings across multiple files

ci: trigger CI for linter fix validation [skip ci]

ci: trigger CI rerun for linter fix validation

ci: force CI retrigger for PR #1886

fix(container_files): restore deleteViaEphemeral security order and rm scope guard

ci: force CI trigger for security fix

feat(ci): add workflow_dispatch trigger to enable manual CI runs

fix(handlers): restore canonical import ordering in terminal.go

fix(test): restore ssrfCheckEnabled after setupTestDB and opt-in in ssrf/mcp test files

fix(tests): update F1085/KI-005 test mocks and documentation test

fix(tests): correct ValidateToken mock — 1 SQL arg not 3

Commits on Apr 24, 2026

chore(canvas): upgrade node:20-alpine → node:22-alpine