sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-10-26 05:30:18 +00:00

Files

T

Anso 4cadd5d49a fix(filesystem): keep a replaced file's owner and let uploads replace read-only files

Review of the staging-mode fix found two regressions in the atomic writer:

- A replacement now carries over the replaced file's owner as well as its
  mode. Keeping a 0600 or 0640 mode without the owner left a root-run save
  of another user's file unreadable to that user.
- The streamed upload branch reopens its staging file to sync it, which a
  read-only creation mode refuses for a non-root process. The owner write
  bit is set at creation and the real mode is applied before publication.

The mesh documentation now says the evidence applies to every compose file
of the stack, including a hand-authored override or a Git source's files.

2026-10-24 20:23:27 -04:00

api-reference

feat(security): add triage status and OpenVEX justification parity (#1615 )

2026-07-11 19:26:26 -04:00

features

fix(filesystem): keep a replaced file's owner and let uploads replace read-only files

2026-10-24 20:23:27 -04:00

getting-started

docs(security): cover the trusted proxy setting, hub-only tokens and audited GitOps actions (#2180 )

2026-10-23 11:00:49 -04:00

images

docs: v1 docs refresh (batch 10) (#2182 )