py/ai-job-search
1
0
Fork 0
mirror of https://github.com/MadsLorentzen/ai-job-search.git synced 2026-09-17 08:36:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(changelog): record the bun-run permission narrowing (#396)

Browse Source 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Mads Lorentzen
2026-08-30 20:27:48 +02:00
co-authored by Claude Fable 5
parent 2d636c50bf
commit 42ba4b475a
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+11
View File
@@ -13,6 +13,17 @@ per-file diff commands.
## [Unreleased]
### Security
- **`settings.json` no longer pre-approves `bun run` on arbitrary files** (#396) - the
template's permission allowlist granted `Bash(bun run:*)`, which auto-approved
`bun run <any file on disk>` in every fork. It is now one path-scoped entry per shipped
portal CLI, matching what each portal SKILL.md already declares. `/scrape` is unaffected
for all portals, including ones added by `/add-portal` - the job-scraper skill's own
`allowed-tools` carries the path-scoped wildcard that covers them during the workflow.
Running a portal CLI ad hoc outside a skill now prompts once, which is the intended
behavior for anything not on the reviewed list. Thanks @vkotaru.
### Fixed
- **`/scrape` now persists each posting's publication date** (#390) - Step 2's contract guarantees a