Mahima Shanware ded474c2d0 fix(core): fail-closed security for plan directory TOCTOU ...

Resolves security review findings:
- Reordered resolveToRealPath before mkdirSync to fully eliminate TOCTOU risks with symlink injection.
- Fail closed by re-throwing 'Security violation' errors instead of swallowing them.
- Replaced lint-disabler with process.stderr.write for legitimate fallback warnings.
- Used direct context string as LRUCache key to avoid collision with an extension potentially named 'default'.

2026-04-07 16:35:24 +00:00

..

a2a-server

fix(cli): remove -S from shebang to fix Windows and BSD execution (#24756)

2026-04-06 19:06:56 +00:00

cli

fix(core,cli): address review findings for plan dir resolution and security

2026-04-07 16:35:24 +00:00

core

fix(core): fail-closed security for plan directory TOCTOU

2026-04-07 16:35:24 +00:00

devtools

Add instructions for how to start react in prod and force react to prod mode (#24590)

2026-04-03 04:42:32 +00:00

sdk

…

test-utils

chore(test-utils): switch integration tests to use PREVIEW_GEMINI_MODEL (#24276)

2026-03-31 00:31:04 +00:00

vscode-ide-companion

Add instructions for how to start react in prod and force react to prod mode (#24590)

2026-04-03 04:42:32 +00:00