fix(security): stop serving and restoring deleted bundle cache - #3100

Merged

riderx merged 20 commits into

mainfrom

fix/security-ghsa-26x3-deleted-cache

Aug 31, 2026

Commits on Aug 26, 2026

fix(security): stop serving and restoring deleted bundle cache

riderx
and
cursoragent
committed
8d22873
fix(security): satisfy deleted-cache typecheck

riderx
and
cursoragent
committed
4bacb1f
Revert "test(security): accept bundle.delete trigger on upload soft-delete"

riderx
authored and
cursoragent
committed
bd8d65e
fix(security): harden deleted bundle cache purge and serve paths

cursoragent
and
riderx
committed
1ea43bc
test(files): mock pg client in bandwidth unit tests for deleted guard

cursoragent
and
riderx
committed
4970807
fix(test): align upload-only delete assertion with bundle delete guard

cursoragent
and
riderx
committed
9a8a556
test(channel_self): retry Kong 502/503 and warm plugin endpoint

cursoragent
and
riderx
committed
19ba5ff
fix(files): purge keyed file-read cache entries on bundle delete

cursoragent
and
riderx
committed
eaee5d5
test(files): mock getDatabaseURL for shared read-only pool lookup

cursoragent
and
riderx
committed
eeadc47
test(files): assert checksum passed to purgeFileReadCache on delete

cursoragent
and
riderx
committed
1802f43
ci: scope push Run tests concurrency by commit SHA

cursoragent
and
riderx
committed
f74b339
ci: restore pull_request trigger for Run tests workflow

cursoragent
and
riderx
committed
0dea67a
test(files): clarify keyed cache purge unit test name

cursoragent
and
riderx
committed
45b32cb
docs(files): note checksum requirement for cache purge

cursoragent
and
riderx
committed
d05d493
test(files): mock getDatabaseURL in files edge unit tests

cursoragent
and
riderx
committed
7eff09e
fix(files): use primary DB for deleted bundle lookup

cursoragent
and
riderx
committed
769ccaa
fix(files): scope deleted-bundle guard to zip r2 paths

cursoragent
and
riderx
committed
7a9604b
test(rate-limit): stabilize device DELETE burst; document global DB gate

cursoragent
and
riderx
committed
167b93f
test(rate-limit): clarify burst retry comment

cursoragent
and
riderx
committed
cee6440
docs(files): cross-ref files.ts cache-hit deletion guard

cursoragent
and
riderx
committed
22843a8

Navigation Menu

Uh oh!

fix(security): stop serving and restoring deleted bundle cache - #3100

fix(security): stop serving and restoring deleted bundle cache#3100
riderx merged 20 commits into
mainfrom
fix/security-ghsa-26x3-deleted-cache

Commits on Aug 26, 2026

fix(security): stop serving and restoring deleted bundle cache

fix(security): satisfy deleted-cache typecheck

Revert "test(security): accept bundle.delete trigger on upload soft-delete"

fix(security): harden deleted bundle cache purge and serve paths

test(files): mock pg client in bandwidth unit tests for deleted guard

fix(test): align upload-only delete assertion with bundle delete guard

test(channel_self): retry Kong 502/503 and warm plugin endpoint

fix(files): purge keyed file-read cache entries on bundle delete

test(files): mock getDatabaseURL for shared read-only pool lookup

test(files): assert checksum passed to purgeFileReadCache on delete

ci: scope push Run tests concurrency by commit SHA

ci: restore pull_request trigger for Run tests workflow

test(files): clarify keyed cache purge unit test name

docs(files): note checksum requirement for cache purge

test(files): mock getDatabaseURL in files edge unit tests

fix(files): use primary DB for deleted bundle lookup

fix(files): scope deleted-bundle guard to zip r2 paths

test(rate-limit): stabilize device DELETE burst; document global DB gate

test(rate-limit): clarify burst retry comment

docs(files): cross-ref files.ts cache-hit deletion guard