Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: pullfrog/pullfrog
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.1.117
Choose a base ref
...
head repository: pullfrog/pullfrog
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.1.118
Choose a head ref
  • 2 commits
  • 18 files changed
  • 1 contributor

Commits on Nov 5, 2026

  1. sandbox: nothing outside the namespace runs what the sandboxed shell … 

    …planted (#1654)

Harnesses and the action run outside the sandbox and find tools by name, so a file planted from the sandboxed shell ran with their secrets. PATH outside the namespace now holds only a sealed per-run bin directory and directories only root can write, planted rc files and git config no longer reach them, OpenCode's file tools are judged by where a path really leads, and a moved or forged checkout is refused.
    @colinhacks @pullfrog
    colinhacks authored and pullfrog[bot] committed Nov 5, 2026
    Configuration menu
    Copy the full SHA
    ad37776 View commit details
    Browse the repository at this point in the history

  2. release: bump action to 0.1.118

    @colinhacks @pullfrog
    colinhacks authored and pullfrog[bot] committed Nov 5, 2026
    Configuration menu
    Copy the full SHA
    9d026e3 View commit details
    Browse the repository at this point in the history
Loading