mirror of
https://github.com/oven-sh/bun
synced 2026-02-19 07:12:24 +00:00
28bfafbf13
- Fixed --dry-run crash by passing edited_package.json.len instead of 0 when publishConfig.directory is set (addresses comment #2427922588) - Refactored pack_dir_path to be computed once and reused throughout the function, eliminating duplicate computation (addresses comment #2428128412) - Added 3 additional test cases (addresses comment #2428128423): 1. Verifies lifecycle scripts run from workspace root, not subdirectory 2. Rejects parent directory traversal (../) 3. Rejects absolute paths - Added validation to reject invalid publishConfig.directory values: * Absolute paths are rejected with clear error message * Parent directory traversal (..) is rejected with clear error message * Added Output.flush() calls to ensure error messages are displayed All 9 publishConfig.directory tests now passing. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>