Tyrone Robb 02c76d3e8c fix: harden gstack-slug against shell injection via eval ...

Whitelist safe characters (a-zA-Z0-9._-) in SLUG and BRANCH output
to prevent shell metacharacter injection when used with eval.

Only affects self-hosted git servers with lax naming rules — GitHub
and GitLab enforce safe characters already. Defense-in-depth.

2026-03-18 09:18:48 +00:00

..

dev-setup

feat: SKILL.md template system, 3-tier testing, DX tools (v0.3.3) (#41)

2026-03-13 21:08:12 -07:00

dev-teardown

feat: v0.3.2 — project-local state, diff-aware QA, Greptile integration (#36)

2026-03-13 18:10:56 -07:00

gstack-config

feat: smart update check with auto-upgrade, snooze backoff, config CLI (v0.3.9) (#62)

2026-03-14 23:28:02 -07:00

gstack-diff-scope

feat: design review lite in /review and /ship + gstack-diff-scope (v0.6.3) (#142)

2026-03-17 20:12:55 -05:00

gstack-slug

fix: harden gstack-slug against shell injection via eval

2026-03-18 09:18:48 +00:00

gstack-update-check

fix: update check cache — 60min UP_TO_DATE TTL + --force flag (v0.4.4) (#110)

2026-03-16 14:14:15 -05:00