Repository navigation

Read BOM composer locks and pin that no lock pin drives a download - #2017

Merged

Mikola Lysenko (mikolalysenko) merged 5 commits into

mainfrom

fix/pristine-fetch-and-composer-bom

Nov 7, 2026

Merged

Read BOM composer locks and pin that no lock pin drives a download#2017
Mikola Lysenko (mikolalysenko) merged 5 commits into
mainfrom
fix/pristine-fetch-and-composer-bom

Commits on Nov 4, 2026
- Read BOM composer locks and pin the no-lock-download guard
  
  Mikola Lysenko (mikolalysenko)
  and
  Claude (claude)
  committed
  dc39f60
Commits on Nov 6, 2026
- Fail closed on unparseable composer locks; tighten the download guard
  
  Mikola Lysenko (mikolalysenko)
  and
  Claude (claude)
  committed
  75b6ca3
- Bound test-only list items in the source scan; gate composer refusal
  Claude (claude)
  committed
  22544e7
Commits on Nov 7, 2026
- Merge main: follow pristine_fetch_is_verifiable into core
  Claude (claude)
  committed
  455e201
- Blank only the inline module an inner test cfg sits in
  Claude (claude)
  committed
  10c665c