kite e9bd334b7f fix: enforce mandatory checksum verification and HTTPS-only registry access ... Previously, checksum failures in install.js were silently downgraded to warnings, allowing unverified binaries to be installed. Similarly, update.js accepted HTTP registries and skipped verification when no matching platform entry was found. Now both scripts treat checksum verification as mandatory when configured: all failure paths (download error, compute error, mismatch, missing platform entry) abort the operation and clean up downloaded files. update.js also drops the http module and silently skips version checks for non-HTTPS registries.		2026-06-16 16:15:14 +08:00
..
github-actions	fix(actions): preserve failed inline review comments (#81)	2026-06-10 17:50:08 +08:00
publish	build: Remove version from binary names and update related scripts	2026-05-22 23:11:37 +08:00
install.js	fix: enforce mandatory checksum verification and HTTPS-only registry access	2026-06-16 16:15:14 +08:00
update.js	fix: enforce mandatory checksum verification and HTTPS-only registry access	2026-06-16 16:15:14 +08:00