Repository navigation
[workflow-audit] 1 unexplained change(s) on 2026-10-31 #1486
Description
1 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/ .gitattributes scripts/setup-git.mjs scripts/md-merge.mjs scripts/md-unwrap.mjs) since 2026-10-30T14:02:55Z.
Renovate pin bumps, reproducible tend regenerations, clean merges, and
commits first pushed by an admin are classified and omitted — see the
run summary for what was skipped.
Everything below needs a human to account for it.
a9f7d7b — Refuse a .. step behind a backslash in a browser binary path
- Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
- First pushed by: dormouse-bot (branch_creation)
- Date: 2026-10-31 12:38:28 +0000
- Refs: remotes/origin/fix/browser-binary-dotdot-backslash
- Files:
.github/audit/canaries/unc-binary-path.patch
- View diff
Activity
dormouse-bot commentedon Oct 31, 2026
a9f7d7bis the bot's nightly fix in open PR #1479 (branchfix/browser-binary-dotdot-backslash), not yet onmain. Its one audit-path change,.github/audit/canaries/unc-binary-path.patch, re-seeds the canary over the lines #1479 moves indor-lib-common/src/browser-providers.tsandlib/src/lib/agent-browser-binary.test.ts: only the blob indexes, hunk offsets, and context lines changed. The mutation is the same as before. It still deletes theisUncOrDevicePathcheck and the UNC/device test rows, as itsSource:line (reverses #1040) says. View diff