You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
Validate every customer-readable member in the exact built source distribution, including root release/configuration files and future nested package data.
Fail closed on unsafe archives and source/version provenance drift while explicitly excluding reviewed binary and development-only surfaces.
Remove unsupported universal-entitlement wording from the packaged environment example.
Pin the build frontend used by pull-request and release verification.