Secrets
gstack’s pregate secrets check now catches the keys it used to pass
An added line that begins with
++dropped as a diff headerA
diff.external or textconv driveremptied the diffNow read hunk by hunk, drivers off, and each finding names its file.
SecretsWindowsBrowseFixes
garrytan/gstack · CHANGELOG.md 1.91.109.0
gstack-pregate could pass a branch carrying a real AWS key. A line starting with two plus signs was skipped. An external diff driver could empty the diff. Now every added line is scanned.
Windows
gstack-upgrade runs under Windows Git Bash again
Git’s
C:/x against Git Bash’s /c/x, compared as textUPGRADE_REFUSEDCompares the paths themselvesevery install upgrades
A gstack tree nested inside another repository is still refused.
SecretsWindowsBrowseFixes
garrytan/gstack · CHANGELOG.md 1.91.109.0
On Windows Git Bash, gstack-upgrade refused every install, comparing two spellings of one path as text. Now it compares the paths. A tree nested inside another repository is still refused.
Browse
Browse treats wizard steps as writes on a live site
Next, Step N, a menu item that opens a dialogcounts as a write
Cancel on that stepproves nothing
Before any Save or Submitevery filled value checked
SecretsWindowsBrowseFixes
garrytan/gstack · CHANGELOG.md 1.91.109.0
On a site that isn't local, Browse counts a wizard step as a write, and its Cancel proves nothing. Before Save or Submit, any filled value that doesn't match stops the run.
Fixes
Fewer false secret alarms, and plan review summaries that stay
token: credentials.token, in a .ts file is code"input_key": "expected_media_rate_bits" is a catalog field/plan-devex-review keeps the summary /plan-design-review wrote
CHANGELOG.mdFull 1.91.109.0 notesSecretsWindowsBrowseFixes
garrytan/gstack · CHANGELOG.md 1.91.109.0
The secrets check also stops flagging ordinary TypeScript as a secret, and catalog field names that end in key. And a second plan review no longer deletes the summary the first review wrote.
