3 Commits

Include renames

Author	SHA1	Message	Date
google-labs-jules[bot]andPR0M3TH3AN	99bf7fa452	fix(test): replace undefined assert.notMatch with assert.doesNotMatch ... `assert.notMatch` is not a valid function in Node.js `node:assert` module. The correct function is `assert.doesNotMatch`. This caused `test/install_dir_validation.test.mjs` to fail. This commit replaces the incorrect usage to fix the test failure. Co-authored-by: PR0M3TH3AN <[email protected]>	2026-02-21 18:33:05 +00:00
google-labs-jules[bot]andPR0M3TH3AN	2430efc256	fix(test): isolate install_dir_validation tests ... Refactor test/install_dir_validation.test.mjs to use unique temporary directories for each subtest, eliminating shared state and race conditions that caused flakiness. Update KNOWN_ISSUES.md to mark the issue as resolved. Co-authored-by: PR0M3TH3AN <[email protected]>	2026-02-21 02:12:23 +00:00
google-labs-jules[bot]andPR0M3TH3AN	b1353cb79b	fix: prevent command injection in init scripts by validating install dir ... - Added `validateInstallDir` function to `src/ops.mjs` to enforce strict allowlist for directory names (alphanumeric, hyphens, underscores, slashes, periods). - Integrated validation into `resolveConfiguration` to sanitize both interactive and mock inputs. - Added comprehensive unit tests in `test/install_dir_validation.test.mjs`. This fixes a vulnerability where malicious directory names could inject shell commands into `package.json` scripts during initialization. Co-authored-by: PR0M3TH3AN <[email protected]>	2026-02-18 03:28:59 +00:00