fix: compare physical paths in the delete guard and keep 0.11 projects upgradable by steve-calvert-glean · Pull Request #45 · gleanwork/pluginpack

fix(fs): fail when a component directory is a file

steve-calvert-glean

committed

fbe2b60

fix(config): keep source.partials inside the project

steve-calvert-glean

committed

886db5c

fix(managed): compare physical paths and check deletions before writing

steve-calvert-glean

committed

598f211

fix(config): reject URL-shaped traversal in config path fields

steve-calvert-glean

committed

e2154f3

fix(config): load the config file without jiti's module cache

steve-calvert-glean

committed

bf0913e

fix(fs): probe case sensitivity on the destination volume, once per build

steve-calvert-glean

committed

d616084

fix(build): resolve final symlinks when checking write collisions

steve-calvert-glean

committed

1fd883d

fix(managed): check deletion containment before any write or delete

steve-calvert-glean

committed

b46def6

fix(build): keep handed-over paths owned and warn before overwriting their edits

steve-calvert-glean

committed

5f864e3

fix(managed): protect discovered legacy sources unless pluginpack wrote them

steve-calvert-glean

committed

c355903

fix(build): refuse to leave a dropped target's output behind

steve-calvert-glean

committed

1d70dbc

fix(managed): keep a path renamed only by case when pruning

steve-calvert-glean

committed

f2a2cd9

fix(managed): let a 0.11 codex package at outDir "." prune itself after upgrade

steve-calvert-glean

committed

b88e62a

Merge remote-tracking branch 'origin/main' into fix/physical-path-safety

steve-calvert-glean

committed

623bd30

Navigation Menu

Repository navigation

fix: compare physical paths in the delete guard and keep 0.11 projects upgradable - #45

fix: compare physical paths in the delete guard and keep 0.11 projects upgradable#45
steve-calvert-glean merged 14 commits into
mainfrom
fix/physical-path-safety

Commits on Oct 21, 2026

fix(fs): fail when a component directory is a file

fix(config): keep source.partials inside the project

fix(managed): compare physical paths and check deletions before writing

fix(config): reject URL-shaped traversal in config path fields

fix(config): load the config file without jiti's module cache

fix(fs): probe case sensitivity on the destination volume, once per build

fix(build): resolve final symlinks when checking write collisions

fix(managed): check deletion containment before any write or delete

fix(build): keep handed-over paths owned and warn before overwriting their edits

fix(managed): protect discovered legacy sources unless pluginpack wrote them

fix(build): refuse to leave a dropped target's output behind

fix(managed): keep a path renamed only by case when pruning

fix(managed): let a 0.11 codex package at outDir "." prune itself after upgrade

Merge remote-tracking branch 'origin/main' into fix/physical-path-safety