Joey Perrott 3093edcad0 fix(docs-infra): secure update-assets script against RCE and SSRF ...

- Validate storedSha and storedBranch from _build-info.json.
- Validate latestSha returned from GitHub API.
- Validate branch in GithubClient.getShaForBranch and baseSha/headSha in GithubClient.getAffectedFiles.
- Use execFileSync instead of execSync to avoid shell execution.

TAG=agy
CONV=4e3e69ba-3f3d-416b-9ce4-9ef75486d2f3

2026-06-02 11:21:56 +02:00

..

routes

fix(docs-infra): use shared heading ID generation logic

2026-02-23 15:16:52 -08:00

synonyms

ci: update algolia synonym updater to use node directly rather than tsx

2026-01-14 09:26:40 -08:00

update-cross-repo-docs

fix(docs-infra): secure update-assets script against RCE and SSRF

2026-06-02 11:21:56 +02:00