3 people 07b33185ea fix: reject credential-bearing Git dependencies (#8542) ...

## Description
Reject Git HTTP dependency URLs containing userinfo before Docker
generation so credentials cannot persist in Dockerfiles or image layers.
Validation now covers local requirement/package metadata and uv
pyproject/lock inputs while keeping errors token-free.

## Test Plan
- [x] Validate credentialed raw, local-manifest, and uv-managed Git URLs
are rejected without echoing secrets
- [x] Validate credential-free HTTPS and SSH Git URLs remain supported

Made by [Open
SWE](https://openswe.vercel.app/agents/81b07455-ece4-3ddc-9955-d7a5bea78d2c)

---------

Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

2026-09-27 21:34:53 +00:00

..

checkpoint

chore(deps): bump anyio from 4.12.1 to 4.14.2 in /libs/checkpoint (#8995)

2026-09-18 15:24:38 -07:00

checkpoint-conformance

chore(deps): bump anyio from 4.13.0 to 4.14.2 in /libs/checkpoint-conformance (#8996)

2026-09-18 15:36:37 -07:00

checkpoint-postgres

chore(deps): bump the minor-and-patch group in /libs/checkpoint-postgres with 3 updates (#8773)

2026-09-02 01:10:58 -07:00

checkpoint-sqlite

chore(deps): bump anyio from 4.12.1 to 4.14.2 in /libs/checkpoint-sqlite (#8993)

2026-09-18 15:24:12 -07:00

cli

fix: reject credential-bearing Git dependencies (#8542)

2026-09-27 21:34:53 +00:00

langgraph

release(langgraph): 1.2.12 (#8987)

2026-09-21 10:38:21 -04:00

prebuilt

release(langgraph): 1.2.12 (#8987)

2026-09-21 10:38:21 -04:00

sdk-js

docs: standardize package README.md structure (#8064)

2026-06-12 19:32:10 -04:00

sdk-py

release(sdk-py): 0.4.5 (#8988)

2026-09-21 10:38:26 -04:00