fix(update): authenticate GitHub API requests to fix 403 Forbidden - #504

Open

PatrickNoFilter wants to merge 11 commits into

Gitlawb:mainfrom

PatrickNoFilter:fix/update-auth

Commits on Sep 8, 2026

fix(update): authenticate GitHub API requests to fix 403 Forbidden
PatrickNoFilter
committed
a35b6a1
fix(update): require HTTPS before sending token, add tests and docs
PatrickNoFilter
committed
974e9dd
fix(pr): auth test isolation + case-insensitive hostname
PatrickNoFilter
committed
04024c4
chore: gitignore zero-linux-sandbox
PatrickNoFilter
committed
cadcde6
style: gofmt internal/update/auth_test.go (CI fix)
PatrickNoFilter
committed
0241c4a
fix(pr): use EnvUpdateToken constant, drop unrelated .gitignore changes
PatrickNoFilter
committed
89dbe22
fix(update): refuse non-https redirects, redact auth logs, document tokens
PatrickNoFilter
committed
3ac219a
fix(update): preserve HTTP mirror redirects without credentials
PatrickNoFilter
committed
17e3a1a

Commits on Sep 9, 2026