Skip to content

Commit 48ec58a

Browse files
vincentkocvincentkoc
committed
fix(security): remediate openclaw alerts
1 parent c0a4a78 commit 48ec58a

5 files changed

Lines changed: 17 additions & 17 deletions

File tree

‎extensions/acpx/npm-shrinkwrap.json‎

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎npm-shrinkwrap.json‎

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-lock.yaml‎

Lines changed: 9 additions & 9 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ overrides:
7070
"@aws-sdk/core": 3.974.13
7171
"@aws-sdk/credential-provider-node": 3.972.52
7272
"@aws-sdk/xml-builder": 3.972.25
73-
hono: 4.12.18
73+
hono: 4.12.21
7474
"@hono/node-server": 1.19.14
7575
axios: 1.16.0
7676
fast-uri: 3.1.2

‎src/agents/auth-profiles/path-resolve.ts‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,9 +66,9 @@ export function resolveOAuthRefreshLockPath(provider: string, profileId: string)
6666
const hash = createHash("sha256");
6767
// This hashes provider/profile identifiers into a path-safe lock name; it is
6868
// not password storage or credential verification.
69-
// codeql[js/insufficient-password-hash]
7069
hash.update(provider, "utf8");
7170
hash.update("\u0000", "utf8"); // NUL separator: unambiguous boundary.
71+
// codeql[js/insufficient-password-hash]
7272
hash.update(profileId, "utf8");
7373
const safeId = `sha256-${hash.digest("hex")}`;
7474
return path.join(resolveStateDir(), "locks", "oauth-refresh", safeId);

0 commit comments

Comments
 (0)