Merge branch 'next' into fix/2116-surface-bare-require
This commit is contained in:
5
.changeset/2198-security-dead-scan-exports.md
Normal file
5
.changeset/2198-security-dead-scan-exports.md
Normal file
@@ -0,0 +1,5 @@
|
||||
---
|
||||
type: Fixed
|
||||
pr: 2211
|
||||
---
|
||||
**Dead security scan exports removed; injection-scan docs corrected to match reality** — `scanEntropyAnomalies` and `shannonEntropy` were dead code with zero production callers (live hooks inline their own patterns for independence). REQ-SCAN-INJ-02/-03 now accurately describe what runs live (injection patterns, invisible Unicode) vs CI-only (base64-decode, codebase scan). (#2198)
|
||||
5
.changeset/witty-dogs-hop.md
Normal file
5
.changeset/witty-dogs-hop.md
Normal file
@@ -0,0 +1,5 @@
|
||||
---
|
||||
type: Fixed
|
||||
pr: 2209
|
||||
---
|
||||
**Milestone audit no longer flags a not-yet-validated phase as a Nyquist failure** — a phase that was planned but never run through `validate-phase` now reports as NOT-VALIDATED (a "run validate-phase" TODO) instead of collapsing into PARTIAL alongside phases whose validation genuinely failed. (#2117)
|
||||
Reference in New Issue
Block a user