Skip to content

feat(roms): datfile-as-dependency pin + fetch + SHA-256 verify (B-0083.1) - #5988

Merged
AceHack merged 2 commits into
mainfrom
otto-cli/b0083-1-datfile-as-dependency-2026-05-29
May 29, 2026
Merged

feat(roms): datfile-as-dependency pin + fetch + SHA-256 verify (B-0083.1)#5988
AceHack merged 2 commits into
mainfrom
otto-cli/b0083-1-datfile-as-dependency-2026-05-29

fix(roms): explicit romsDir manifest field replaces fragile slug→path…

33ad2cd
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed May 29, 2026 in 2s

2 new alerts including 2 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 262 in tools/roms/fetch-datfile.ts

See this annotation in the file changed.

Code scanning / CodeQL

File data in outbound network request Medium

Outbound network request depends on
file data
.

Check warning on line 282 in tools/roms/fetch-datfile.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
.