Repository navigation

fix: isolate self-upgrade installer lookup from project paths - #5175

Open

mnriem wants to merge 10 commits into

github:mainfrom

mnriem:mnriem-installer-lookup-security

Open

fix: isolate self-upgrade installer lookup from project paths#5175
mnriem wants to merge 10 commits into
github:mainfrom
mnriem:mnriem-installer-lookup-security

Commits on Oct 29, 2026
- fix: isolate self-upgrade installer lookup from project paths
  
  mnriem
  and
  Copilot
  committed
  eab0510
- fix: reject installer symlink paths through the worktree
  
  mnriem
  and
  Copilot
  committed
  ee20e70
- fix: normalize Windows installer path comparisons
  
  mnriem
  and
  Copilot
  committed
  cd1e7d2
- fix: validate installer paths by filesystem identity
  
  mnriem
  and
  Copilot
  committed
  b98bc93
- fix: validate safe external installer junctions
  
  mnriem
  and
  Copilot
  committed
  1951d9f
- Merge upstream/main and preserve installer rejection contracts
  
  mnriem
  and
  Copilot
  committed
  f9aefe8
Commits on Oct 30, 2026
- fix: preserve installer links and lookup ordering
  
  mnriem
  and
  Copilot
  committed
  2c09108
- fix: inspect parent path components as directories
  
  mnriem
  and
  Copilot
  committed
  520e072
- test: use native relative paths in symlink fixture
  
  mnriem
  and
  Copilot
  committed
  ba71eb3
- test: isolate self-upgrade lookup environments
  
  mnriem
  and
  Copilot
  committed
  995075c