freemo
00dbeee2bb
CI / push-validation (pull_request) Successful in 45s
CI / lint (pull_request) Failing after 1m1s
CI / build (pull_request) Successful in 1m25s
CI / helm (pull_request) Successful in 1m26s
CI / typecheck (pull_request) Successful in 1m32s
CI / quality (pull_request) Successful in 2m7s
CI / security (pull_request) Successful in 2m34s
CI / unit_tests (pull_request) Failing after 3m8s
CI / docker (pull_request) Has been skipped
CI / coverage (pull_request) Has been skipped
CI / integration_tests (pull_request) Successful in 7m16s
CI / status-check (pull_request) Failing after 3s
Replace insecure str.startswith() path check in validate_path() with Path.resolve()/Path.relative_to() for proper canonicalisation before sandbox containment verification. Added comprehensive unit tests covering sibling-prefix collision, symlink resolution, and normalisation edge cases. Updated CHANGELOG and contributors. ISSUES CLOSED: #7478 ISSUES CLOSED: #7549