Skip to content

fix(security): content-lock channel-linked r2-direct bundles #3098

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
riderx wants to merge 21 commits into
base: main
Choose a base branch
from
+770 −3
Open

fix(security): content-lock channel-linked r2-direct bundles #3098

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
9c0bb6d
fix(security): content-lock channel-linked r2-direct bundles
riderx Aug 16, 2026
31c055d
fix(security): lock only checksum on linked r2-direct
riderx Aug 16, 2026
b1d1386
fix(db): address review on r2-direct OTA lock migration and tests
cursoragent Aug 25, 2026
2185b42
chore(db): bump migration timestamp after rebase onto main
cursoragent Aug 25, 2026
698d94b
chore(ci): retrigger workflow after cancelled run
cursoragent Aug 25, 2026
99a8421
fix(security): lock delivery metadata and serialize channel-linked r2…
cursoragent Aug 25, 2026
f1e8bd9
fix(db): align channel promotion lock order with app_versions updates
cursoragent Aug 25, 2026
fd84301
fix(db): use FOR UPDATE in lock_channel_bundle_lifecycle
cursoragent Aug 25, 2026
e3af3d7
fix(db): rely on row locks instead of advisory lock in r2-direct OTA …
cursoragent Aug 25, 2026
7b0f88b
fix(db): acquire FOR UPDATE before channel-linked r2-direct guard
cursoragent Aug 25, 2026
3079fb3
fix(test): align app_versions INSERT column counts in r2-direct OTA test
cursoragent Aug 25, 2026
55b22c1
chore(ci): retrigger tests after cancelled workflow
cursoragent Aug 25, 2026
8be7c45
test(rbac): use real bundle rows for lock_channel_bundle_lifecycle or…
cursoragent Aug 25, 2026
94b9741
test(rbac): use dedicated bundles for lifecycle lock ordering test
cursoragent Aug 25, 2026
ea97292
chore(db): bump migration timestamp after main rebase
cursoragent Aug 25, 2026
f3284f1
ci: retrigger pull_request test workflow
cursoragent Aug 25, 2026
dc3c812
ci: retrigger tests after cooldown
cursoragent Aug 25, 2026
e3e5f5b
test(rbac): commit bundle fixtures before lifecycle lock concurrency …
cursoragent Aug 25, 2026
201ac10
fix(security): lock manifest on channel-linked r2-direct bundles
cursoragent Aug 25, 2026
b0068d3
docs(security): note manifest in r2-direct execution profile
cursoragent Aug 25, 2026
a80281b
ci: retrigger pull_request test workflow
cursoragent Aug 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading