Robustness and input-handling pass across install, shell, TLS/QUIC, HTTP/3, SQL and crypto - #37669

Merged

Jarred-Sumner merged 12 commits into

mainfrom

claude/hardening-sweep-13

Aug 12, 2026

Commits on Aug 12, 2026

Harden install, shell, TLS/QUIC, HTTP/3, SQL and crypto input handling
Jarred-Sumner
committed
a0abe06
install: key --trust on resolved packages; io: hold the reader parent across the read loop
Jarred-Sumner
committed
11445fc
Address review feedback on the extractor, install, quic, shell and ffi changes
Jarred-Sumner
committed
dd8b9c5
Add regression tests for the hardening pass
Jarred-Sumner
committed
118c8d4
http: keep the existing unix-socket redirect handling
Jarred-Sumner
committed
f942c44
sql: keep non-string tls option values on the existing validation path
Jarred-Sumner
committed
78c73aa
Address review feedback: sql tls:false precedence, install helpers, ffi header staging, test assertions
Jarred-Sumner
committed
6b87188
test: keep the cc() header-directory tests off the ASAN lane
Jarred-Sumner
committed
80834ec
test: run the large-payload streaming case after the memory-bound case
Jarred-Sumner
committed
c7b403b
shell mv: take directory ownership and mode from the opened descriptor
Jarred-Sumner
committed
2b8cd79
sql: give ?ssl=true the same serverName handling as ?ssl=require
Jarred-Sumner
committed
184c03d
Revert the case-insensitive node_modules path check
Jarred-Sumner
committed
f4f5e74