Joey Perrott 70af5e8abd fix(docs-infra): secure update-assets script against RCE and SSRF ...

- Validate storedSha and storedBranch from _build-info.json.
- Validate latestSha returned from GitHub API.
- Validate branch in GithubClient.getShaForBranch and baseSha/headSha in GithubClient.getAffectedFiles.
- Use execFileSync instead of execSync to avoid shell execution.

TAG=agy
CONV=4e3e69ba-3f3d-416b-9ce4-9ef75486d2f3

(cherry picked from commit 3093edcad0)

2026-06-02 11:22:02 +02:00

..

routes

fix(docs-infra): use shared heading ID generation logic

2026-02-23 23:16:55 +00:00

synonyms

ci: update algolia synonym updater to use node directly rather than tsx

2026-01-14 09:26:40 -08:00

update-cross-repo-docs

fix(docs-infra): secure update-assets script against RCE and SSRF

2026-06-02 11:22:02 +02:00