Skip to content

fix(crawl): a one-shot fetch reads the homepage; the directory stays charged on sight - #256

Merged
sh1pt-actions-fleet[bot] merged 1 commit into
mainfrom
riot/plain-fetch-1028
Oct 28, 2026
Merged

sh1pt-actions-fleet[bot] merged 1 commit into
mainfrom
riot/plain-fetch-1028

Conversation

@sh1pt-actions-fleet

Copy link
Copy Markdown
Contributor

x402-gateway 0.13.1 -> 0.16.1 (profullstack/x402-gateway#29, #30). A one-shot fetch of the homepage with a stale, spoofed or headless Chrome string got 402 (2026-10-28 report). Now those strings get 20 pages an hour per address, but ONLY on the front door (/, /about, /contact, /advertise, /submit, /terms, /privacy). The 2026-09-05 residential rotation sent at most 2 requests per address, so /topics, /authors and the API stay charged on sight. GPTBot is still charged everywhere outside OPEN_PATHS.

Tests: apps/web 503 pass + 1 new gate test. 6 webhooks tests fail locally only because they need Postgres on :5439 (ECONNREFUSED), unrelated to this change.

🤖 Generated with Claude Code

…charged on sight

x402-gateway 0.13.1 -> 0.16.1. A spoofed/stale/headless string now gets 20
pages an hour per address, but only on the front door (/, /about, /contact,
/advertise, /submit, /terms, /privacy): the 2026-09-05 rotation never sent
more than two requests from an address, so /topics, /authors and the API
keep charging it on sight. Reported 2026-10-28: a one-shot fetch of the
homepage got 402.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​profullstack/​x402-gateway@​0.13.1 ⏵ 0.16.184 -4100100 +197 +1100

View full report

@sh1pt-actions-fleet
sh1pt-actions-fleet Bot merged commit 0b8ae37 into main Oct 28, 2026
3 checks passed
@sh1pt-actions-fleet
sh1pt-actions-fleet Bot deleted the riot/plain-fetch-1028 branch October 28, 2026 23:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant