test(supply-chain): preserve simple dependency-path cycle semantics - #867

Open

seonghobae wants to merge 36 commits into

bolt-optimize-supply-chain-check-10739114227262951755

Commits on Aug 16, 2026

perf: optimize supply chain check graph traversal memory usage
seonghobae
committed
5b71eb0
test(supply-chain): preserve simple dependency path semantics
seonghobae
committed
3f94b21
fix(supply-chain): preserve simple path cycle semantics
seonghobae
committed
28c61cd
perf: optimize supply chain check graph traversal memory usage
seonghobae
committed
913e7c7
⚡ Bolt: [성능 개선] 의존성 그래프 탐색 메모리 최적화
seonghobae
committed
fca0bb7
test(supply-chain): reproduce cyclic owner-chain false positive
seonghobae
committed
b6690c6
fix(supply-chain): restore simple dependency-path semantics
seonghobae
committed
bbf46a3
docs(supply-chain): preserve simple-path authority
seonghobae
committed
3ac96dd
⚡ Bolt: [성능 개선] 의존성 그래프 탐색 메모리 최적화
seonghobae
committed
a88b213
fix(supply-chain): restore simple dependency-path cycle semantics

cursoragent
and
seonghobae
committed
f4a6053
revert(supply-chain): restore validated simple-path semantics after drift
seonghobae
committed
4881dba
merge(supply-chain): consolidate cycle regression authority into #867
seonghobae
committed
dbcbe6d
⚡ Bolt: [성능 개선] 의존성 그래프 탐색 메모리 최적화 내 사이클 버그 수정
seonghobae
committed
bcf22ee
fix(supply-chain): restore simple-path cycle regressions after Bolt rewrite

cursoragent
and
seonghobae
committed
f270d3d
fix(supply-chain): restore simple-path authority and lock policy text

cursoragent
and
seonghobae
committed
593b6fe
test(supply-chain): lock simple-path policy authority
seonghobae
committed
09a27eb
test(supply-chain): lock direct path through cyclic graph
seonghobae
committed
7ac91ff
fix(security): resolve pdfjs-dist CVE-2026-16633
seonghobae
committed
250b29f
fix(supply-chain): restore canonical dependency-path guard
seonghobae
committed
5903ee7
test(supply-chain): lock direct path through cyclic graph
seonghobae
committed
07583f3

Commits on Aug 17, 2026

🛡️ Sentinel: [HIGH] Ignore pdfjs-dist CVE-2026-16633
seonghobae
committed
71055cc
fix(supply-chain): drop inherited pdfjs Trivy suppression
seonghobae
committed
ad25533
fix(supply-chain): keep dependency remediation in #783
seonghobae
committed
f19be09
test(supply-chain): reject recursion-limited traversal
seonghobae
committed
e2c590e
test(supply-chain): format depth regression
seonghobae
committed
eaba529
fix(supply-chain): keep dependency path traversal iterative
seonghobae
committed
4d69ad1
test(supply-chain): restore simple-path cycle authority
seonghobae
committed
c02c752
docs(security): restore simple-path dependency authority
seonghobae
committed
f1ac416

Commits on Aug 25, 2026

Merge branch 'develop' into bolt-optimize-supply-chain-check-10739114227262951755
seonghobae
authored
2e03f5b

Commits on Aug 26, 2026