Martin Vogel 4bbcfec503 cli: fix self-update checksum computation and fail closed ...

The macOS digest path invoked `shasum -a CBM_SZ_256` — a literal string
(not a macro; string literals do not expand) naming an invalid algorithm, so
the digest always failed on macOS, and the self-update path then treated a
could-not-verify result as non-fatal and installed the download regardless.
Use the correct algorithm, and install only a positively-verified download:
a mismatch, a missing checksum entry, or an unavailable hash tool now all
abort. Adds a known-vector digest regression test.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-07-07 21:31:23 +02:00

..

cli.c

cli: fix self-update checksum computation and fail closed

2026-07-07 21:31:23 +02:00

cli.h

Merge pull request #664 from mvanhorn/feat/651-feat-auto-install-support-for-the-junie-

2026-07-05 01:23:46 +02:00

hook_augment.c

fix(hook): make hook-augment work on Windows drive-letter paths

2026-07-01 06:19:30 -06:00

progress_sink.c

Wire up risk_labels on trace_path, add --progress CLI flag

2026-04-02 23:47:40 +02:00

progress_sink.h

Wire up risk_labels on trace_path, add --progress CLI flag

2026-04-02 23:47:40 +02:00