Hardening: input validation and compatibility fixes across 9 subsystems (round 9) - #31606

Merged

Jarred-Sumner merged 21 commits into

mainfrom

claude/security-round-10

Jun 2, 2026

Commits on May 30, 2026

transpiler: tighten cached module metadata validation
Jarred-Sumner
committed
10843fe
postgres: bound protocol message handling
Jarred-Sumner
committed
e4d9ec0
htmlrewriter: tighten comment mutation handling
Jarred-Sumner
committed
5566039
test: add regression coverage for input validation changes
Jarred-Sumner
committed
9456499
bun-lambda: build event request URLs from the request context domain
Jarred-Sumner
committed
08bb3a6
create: pass detected dependencies as positional install arguments
Jarred-Sumner
committed
e125f62
node:zlib: tighten write state handling
Jarred-Sumner
committed
01f91d6
node:net: tighten subnet rule matching
Jarred-Sumner
committed
d0b16a8
node:http: bound duplicate header handling
Jarred-Sumner
committed
18b747a
glob: tighten cwd validation
Jarred-Sumner
committed
a4b7c5b
test: add regression coverage for input validation changes
Jarred-Sumner
committed
a6f3f97
Merge branch 'claude/security-round-10-shard-2' into claude/security-round-10
Jarred-Sumner
committed
a081a35
Merge branch 'claude/security-round-10-shard-3' into claude/security-round-10
Jarred-Sumner
committed
ec0c034
[autofix.ci] apply automated fixes
autofix-ci[bot]
authored
2f94449
create: build install argv with vec macro
Jarred-Sumner
committed
493d444
test: tighten assertions and platform coverage in new regression tests
Jarred-Sumner
committed
e005625

Commits on Jun 1, 2026

Commits on Jun 2, 2026

node:http: merge duplicate request headers in place via PutPropertySlot offset
robobun
committed
1ffc4ca
ci: retrigger
robobun
committed
a82c15d
node:http: check for existing header before storing, join as flat strings
robobun
committed
054a9fc