registry: bind catalog URLs to canonical source #400

Open
nsaspy wants to merge 0 commits from rage/registry-source-urls into main
Owner

The catalog self-identifies its repository/raw source, but those fields were previously unchecked. A drifted catalog could send downstream consumers somewhere different from the source/package contract the validator actually proves.

RAGE:

  • RED 58e6ed66: reject registry and raw-catalog URL drift
  • implementation 2d6f1e9d: require the canonical repository and main/plugins.json raw source

Stacked on #163 because both touch document-level validation; retarget after #163 lands.

The catalog self-identifies its repository/raw source, but those fields were previously unchecked. A drifted catalog could send downstream consumers somewhere different from the source/package contract the validator actually proves. RAGE: - RED `58e6ed66`: reject registry and raw-catalog URL drift - implementation `2d6f1e9d`: require the canonical repository and `main/plugins.json` raw source Stacked on #163 because both touch document-level validation; retarget after #163 lands.
Some checks failed
CI / test (pull_request) Failing after 16s
This branch is already included in the target branch. There is nothing to merge.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin rage/registry-source-urls:rage/registry-source-urls
git switch rage/registry-source-urls

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff rage/registry-source-urls
git switch rage/registry-source-urls
git rebase main
git switch main
git merge --ff-only rage/registry-source-urls
git switch rage/registry-source-urls
git rebase main
git switch main
git merge --no-ff rage/registry-source-urls
git switch main
git merge --squash rage/registry-source-urls
git switch main
git merge --ff-only rage/registry-source-urls
git switch main
git merge rage/registry-source-urls
git push origin main
Sign in to join this conversation.
No description provided.