Release 1.5.1 - #48

Merged

AdityaHirapara merged 14 commits into

Sep 25, 2026

Commits on Aug 7, 2026

test: fix pre-existing unit-test failures (green the suite)

07souravkunda
and
claude
committed
ee74327

Commits on Aug 12, 2026

build: verify gem integrity at install time (CVE-2020-8130 hardening)

07souravkunda
and
claude
committed
524db87
fix: run the binary directly in verify_binary instead of through a shell (CWE-78)
07souravkunda
committed
db623c3
chore: scope-limited scanner suppression on the fixed verify_binary line
07souravkunda
committed
ab48704
test: pin the array-form behaviour with a real binary at a hostile path
07souravkunda
committed
e766c21

Commits on Sep 21, 2026

fix: create the logfile without a shell (CWE-78 command injection)
07souravkunda
committed
b7b0d1a
ci: pin gem-push workflow actions to immutable commit SHAs

07souravkunda
and
claude
committed
007cb11
fix: redact access key in public command accessor and inspect (CWE-312)

07souravkunda
and
claude
committed
9529fed

Commits on Sep 24, 2026

Commits on Sep 25, 2026

bump: version
07souravkunda
committed
123c882