fix(coverage): trust validated head-mutated pnpm locks via manifest record - #1336

Merged

seonghobae merged 33 commits into

mainfrom

fix/pnpm-head-lock-validation

Aug 26, 2026

Commits on Aug 25, 2026

fix(coverage): trust validated head-mutated pnpm locks via manifest record
seonghobae
committed
790e397
test(coverage): require lowercase pnpm manifest identities
seonghobae
committed
956b11e
test(coverage): reject comma-greedy pnpm resolution parsing
seonghobae
committed
c5b3856
fix(coverage): bound pnpm inline resolution tokens
seonghobae
committed
a56c4d1
fix(coverage): normalize pnpm manifest identities
seonghobae
committed
11bc884
test(coverage): pin normalized dispatch workflow
seonghobae
committed
f381885
fix(coverage): correct pnpm regex escapes
seonghobae
committed
ac714df
test(strix): align direct fallback queue contract
seonghobae
committed
7a90dea
test(strix): align NVIDIA fallback contract
seonghobae
committed
fde65d9
fix(review): align direct OpenAI fallback model
seonghobae
committed
9f31a17
test(review): align direct OpenAI fallback assertions
seonghobae
committed
6dbdb1f
test(review): pin aligned dispatch workflow
seonghobae
committed
004216f
docs(coverage): correct pnpm trust references
seonghobae
committed
0b41da2
docs(coverage): preserve authoritative OWASP URL
seonghobae
committed
b12814d
test(coverage): reproduce pnpm metadata source-word false rejection
seonghobae
committed
610c740
fix(coverage): classify only pnpm fetch declarations
seonghobae
committed
ab37151
fix(review): bind pnpm manifest manager and current model docs
seonghobae
committed
8f375fe
test(review): pin pnpm manager-bound dispatch workflow
seonghobae
committed
86f8d7c
test(review): require pnpm manifest manager binding
seonghobae
committed
70ae3e6
fix(coverage): restore executable pnpm source guard
seonghobae
committed
1d817cd
test(coverage): reproduce versioned pnpm manifest mismatch
seonghobae
committed
889ebec
fix(review): match versioned pnpm manifest specs
seonghobae
committed
ca9b5b9
test(review): pin version-aware pnpm manifest workflow
seonghobae
committed
f0d907a
test(review): require version-aware pnpm manager predicate
seonghobae
committed
59315de
merge: reconcile protected main into pnpm lock trust repair
seonghobae
committed
c5d847e
test(coverage): exercise pnpm lock fail-closed branches
seonghobae
committed
6bc96d4
Merge protected main into pnpm lock trust owner
seonghobae
committed
3058b18
fix(ci): restore complete merged OpenCode workflow
seonghobae
committed
d798c4c
Merge origin/main into fix/pnpm-head-lock-validation
seonghobae
committed
e1f1475
fix(ci): escape materializer diagnostics
seonghobae
committed
c694825

Navigation Menu

Uh oh!

fix(coverage): trust validated head-mutated pnpm locks via manifest record - #1336

fix(coverage): trust validated head-mutated pnpm locks via manifest record#1336
seonghobae merged 33 commits into
mainfrom
fix/pnpm-head-lock-validation

Commits on Aug 25, 2026

fix(coverage): trust validated head-mutated pnpm locks via manifest record

test(coverage): require lowercase pnpm manifest identities

test(coverage): reject comma-greedy pnpm resolution parsing

fix(coverage): bound pnpm inline resolution tokens

fix(coverage): normalize pnpm manifest identities

test(coverage): pin normalized dispatch workflow

fix(coverage): correct pnpm regex escapes

test(strix): align direct fallback queue contract

test(strix): align NVIDIA fallback contract

fix(review): align direct OpenAI fallback model

test(review): align direct OpenAI fallback assertions

test(review): pin aligned dispatch workflow

docs(coverage): correct pnpm trust references

docs(coverage): preserve authoritative OWASP URL

test(coverage): reproduce pnpm metadata source-word false rejection

fix(coverage): classify only pnpm fetch declarations

fix(review): bind pnpm manifest manager and current model docs

test(review): pin pnpm manager-bound dispatch workflow

test(review): require pnpm manifest manager binding

fix(coverage): restore executable pnpm source guard

test(coverage): reproduce versioned pnpm manifest mismatch

fix(review): match versioned pnpm manifest specs

test(review): pin version-aware pnpm manifest workflow

test(review): require version-aware pnpm manager predicate

merge: reconcile protected main into pnpm lock trust repair

test(coverage): exercise pnpm lock fail-closed branches

Merge protected main into pnpm lock trust owner

fix(ci): restore complete merged OpenCode workflow

Merge origin/main into fix/pnpm-head-lock-validation

fix(ci): escape materializer diagnostics

Commits on Aug 26, 2026

Merge branch 'main' into fix/pnpm-head-lock-validation

docs(copy): make dependency update guidance actionable

Merge branch 'main' into fix/pnpm-head-lock-validation