fix(install): store and verify SHA-512 integrity hash for GitHub tarball dependencies - #27019

Merged

Jarred-Sumner merged 10 commits into

mainfrom

claude/fix-github-tarball-integrity

Feb 17, 2026

Commits on Feb 14, 2026

fix(install): store and verify SHA-512 integrity hash for GitHub tarball dependencies

Claude Bot
and
claude
committed
1820963
fix(install): update lockfile with integrity when old format lacks it

Claude Bot
and
claude
committed
6555296
fix(test): address review comments on GitHub tarball integrity tests

Claude Bot
and
claude
committed
a5f00a0
fix(test): use per-test cache dirs for full isolation

Claude Bot
and
claude
committed
ddec7e6
fix(test): assert stderr before exitCode for better failure diagnostics

Claude Bot
and
claude
committed
519199d
fix(install): use bun.sha instead of std.crypto for integrity hash

Claude Bot
and
claude
committed
6e455cd
[autofix.ci] apply automated fixes
autofix-ci[bot]
authored
904c92e
Merge branch 'main' into claude/fix-github-tarball-integrity
Jarred-Sumner
authored
06a9e93

Commits on Feb 17, 2026

git mv
Jarred-Sumner
committed
7386451
Update GHSA-pfwx-36v6-832x.test.ts
Jarred-Sumner
committed
f7e8055