Refuse a build whose module directory, archive or bundle output leads out of the module through a link, so a repository cannot make build-agent pack files from the build node (issue 1609) #415

Merged

mesh-tools merged 2 commits from fix/1609-archive-symlink into main

2026-10-21 10:16:52 +00:00

Author	SHA1	Message	Date
mesh-tools	0caa8c6844	Refuse a bundle whose output directory leads out of the module through a link, so a repository cannot make the build write into or pack files it does not hold (issue 1609) mesh/merge-gate head 0caa8c6844d9 merged into trunk 0205b8f7080a — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every … Details mesh/repo-check head 0caa8c6844d9 merged into trunk 0205b8f7080a — pass: its merge-check.sh passed Details mesh/delivery delivered Details	2026-10-21 09:46:00 +00:00
mesh-tools	fcca6ba9e0	Refuse an archive or a module directory that leads out of the repository through a link in the tree, so a repository cannot make the build pack files it does not hold (issue 1609)	2026-10-21 09:22:14 +00:00