Merge pull request #1632 from open-gsd/fix/1628-config-set-security-enum-validation

This commit is contained in:
Tom Boucher
2026-06-23 17:24:23 -04:00
committed by GitHub
5 changed files with 684 additions and 25 deletions

View File

@@ -0,0 +1,5 @@
---
type: Fixed
pr: 1632
---
**`config-set` now rejects invalid config values instead of storing them silently** — out-of-enum strings, JSON array/object coercion (e.g. `["high"]` stored as an array in a scalar key), and wrong-typed values for capability-registry-owned keys are validated against each key's declared schema at set time. Previously these were accepted and persisted, mis-configuring GSD. (#1628)