mirror of
https://github.com/stack-auth/stack.git
synced 2026-06-13 21:01:21 +08:00
6aac337428
Address PR #1521 review: - dev-env-state: validate localDashboard on read (mirroring the cliUpdateCheck cache). A hand-edited/cross-version state file with a non-string version reached parseVersionCore (version.trim()) via shouldRestartDashboard -> isVersionNewer inside startDashboardIfNeeded, which is outside the auto-update fail-open guard and would crash `stack dev`. Malformed records are now treated as 'no dashboard'. - self-update: re-exec via npx.cmd on Windows now spawns with shell:true. After CVE-2024-27980 Node throws EINVAL spawning a .cmd directly without a shell, so the auto-update re-exec silently never ran on Windows. args stay a clean argv array; runReexec quotes them for the shell at spawn time so paths/args with spaces survive. |
||
|---|---|---|
| .. | ||
| scripts | ||
| src | ||
| .eslintrc.cjs | ||
| package.json | ||
| tsconfig.json | ||
| tsdown.config.ts | ||
| vitest.config.ts | ||