fix(plugin-loader): auto-detect new dependencies via requirements.txt hash#355

Merged

ChuckBuilds merged 6 commits into

mainfrom

fix/dep-hash-marker-auto-install

May 30, 2026

Commits on May 29, 2026

fix(plugin-loader): detect new deps via requirements.txt hash instead of empty marker

Chuck
and
claude
committed
fix(plugin-loader): address CodeQL path expression and I/O error handling

Chuck
and
claude
committed

Commits on May 30, 2026

fix(plugin-loader): use realpath+startswith containment check for CodeQL path-injection

Chuck
and
claude
committed
fix(plugin-loader): fail-fast when install_dependencies returns False

Chuck
and
claude
committed
fix(plugin-loader): use basename+reconstruct to satisfy CodeQL py/path-injection

Chuck
and
claude
committed
fix(plugin-loader): guard against empty basename when plugin_dir resolves to fs root

Chuck
and
claude
committed