mirror of
https://github.com/heygen-com/hyperframes.git
synced 2026-09-14 18:01:20 +08:00
4ef1511b19
Rames' non-blocking note on #2975. The paths filter listed the renderer but not scripts/registry-target-paths.mjs, which it imports — so a future change to the path-traversal defence alone would never re-run the only job that exercises it. That is the same shape as the bug the module exists to prevent: the check is present, the thing that would catch a regression in it is not wired to run.