fix(security): merge vault channel_metadata by spread, not Object.assign (#879) - #880

Open

scottschreckengaust wants to merge 5 commits into

mainfrom

fix/879-insecure-object-assign

Commits on Sep 10, 2026

fix(security): merge vault channel_metadata by spread, not Object.assign (#879)

scottschreckengaust
and
claude
committed
3c64ae3

Commits on Sep 11, 2026

Merge remote-tracking branch 'origin/main' into fix/879-insecure-object-assign
scottschreckengaust
committed
1e7dcfd

Commits on Sep 15, 2026

fix(cdk): drop the dead workspace-id write and correct the stale guard docstring (#880 review)

scottschreckengaust
and
claude
committed
37a79bf
test(cdk): close two holes in the vault-metadata source guards (#880 review)

scottschreckengaust
and
claude
committed
d4ec661
Merge branch 'main' into fix/879-insecure-object-assign
scottschreckengaust
authored
a382fca