fix(ci): repair patch-validator cache and embedded-runtime evidence - #566

Merged

seonghobae merged 23 commits into

mainfrom

fix/patch-validator-gha-cache-auth

Sep 9, 2026

Commits on Sep 9, 2026

test(ci): require authenticated gha cache transport
seonghobae
committed
ed1e5ff
fix(ci): authenticate patch-validator gha cache transport
seonghobae
committed
f76571c
test(ci): align image build contracts with authenticated gha action
seonghobae
committed
26b6e93
test(ci): bind image context contract to authenticated action
seonghobae
committed
99ce97d
test(ci): preserve patch-validator contracts through gha action
seonghobae
committed
7b64714
test(ci): preserve bounded image build deadline
seonghobae
committed
f6dbba3
fix(ci): preserve build step timeout with authenticated cache
seonghobae
committed
e7be3aa
merge(restack): converge #566 on protected main 97c1562b
seonghobae
committed
afe28b5
merge(restack): converge #566 on protected main be7df559
seonghobae
committed
c7c86b0
fix(patch-validator): verify normalized CPE artifact versions
seonghobae
committed
eb54686
test(patch-validator): cover normalized V8 scanner version
seonghobae
committed
b1c33d1
fix(security): overlay patched c-ares in validator runtime
seonghobae
committed
1c91b73
test(security): pin patched c-ares overlay
seonghobae
committed
b79f967
fix(security): review exact embedded runtime applicability
seonghobae
committed
d829535
test(security): cover reviewed runtime false positives
seonghobae
committed
1175d77
docs(security): doctor embedded runtime applicability review
seonghobae
committed
3fc00d7
test(security): reject mixed c-ares source overlays
seonghobae
committed
6c84bc0
fix(security): replace vendored c-ares tree atomically
seonghobae
committed
050ab45
test(security): preserve Node c-ares integration glue
seonghobae
committed
858f95e
fix(security): preserve Node c-ares integration on source replacement
seonghobae
committed
4d1797e
test(security): align c-ares regression with atomic replacement
seonghobae
committed
19f74d2
test(ci): require canonical c-ares config replacement
seonghobae
committed
e8fb138
fix(ci): restore Node-owned c-ares config atomically
seonghobae
committed
772bfba

Navigation Menu

Uh oh!

fix(ci): repair patch-validator cache and embedded-runtime evidence - #566

fix(ci): repair patch-validator cache and embedded-runtime evidence#566
seonghobae merged 23 commits into
mainfrom
fix/patch-validator-gha-cache-auth

Commits on Sep 9, 2026

test(ci): require authenticated gha cache transport

fix(ci): authenticate patch-validator gha cache transport

test(ci): align image build contracts with authenticated gha action

test(ci): bind image context contract to authenticated action

test(ci): preserve patch-validator contracts through gha action

test(ci): preserve bounded image build deadline

fix(ci): preserve build step timeout with authenticated cache

merge(restack): converge #566 on protected main 97c1562b

merge(restack): converge #566 on protected main be7df559

fix(patch-validator): verify normalized CPE artifact versions

test(patch-validator): cover normalized V8 scanner version

fix(security): overlay patched c-ares in validator runtime

test(security): pin patched c-ares overlay

fix(security): review exact embedded runtime applicability

test(security): cover reviewed runtime false positives

docs(security): doctor embedded runtime applicability review

test(security): reject mixed c-ares source overlays

fix(security): replace vendored c-ares tree atomically

test(security): preserve Node c-ares integration glue

fix(security): preserve Node c-ares integration on source replacement

test(security): align c-ares regression with atomic replacement

test(ci): require canonical c-ares config replacement

fix(ci): restore Node-owned c-ares config atomically