fix(plugins): disable auto-running npm run build and stage plugin updates (P0) - #1117

Open

wjc2821296948 wants to merge 5 commits into

siteboon:mainfrom

wjc2821296948:fix/plugin-install-rce

Commits on Aug 7, 2026

fix(plugins): disable auto-running npm run build during plugin install

wjc2821296948
and
chaogeshuodiannao
committed
df75870
fix(plugins): stage plugin updates so a rejected update leaves the live plugin untouched

wjc2821296948
and
chaogeshuodiannao
committed
8954fa1
fix(plugins): preserve the live plugin directory when the update swap fails

wjc2821296948
and
chaogeshuodiannao
committed
0c2f5e9
fix(plugins): require https:// or git@ scheme in installPluginFromGit

wjc2821296948
and
chaogeshuodiannao
committed
4dd03c2
fix(plugins): harden update swap against backup scan leakage and re-clone RCE

wjc2821296948
and
chaogeshuodiannao
committed
2238343