Documented changes
6 typed entries
Verified contributors
1 verified contributor · 1 credit
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v2.2.0a66 is a preview release published 2026-07-27. Upstream documents: Guard 2.2.0a66 is an opt-in prerelease cut from [`433a73b`](https://github.com/hashgraph-online/hol-guard/commit/433a73bed8c8b1b9d0941229fbbb7bc3b3bd02cc). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 2.2.0a65](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v2.2.0a65). Its comparison base is alpha/v2.2.0a65. It includes 1 verified contribution delivery with public evidence links.
Changes
Fixed
4- **runtime**: Bind path validation to CodeQL sink ([#1950](https://github.com/hashgraph-online/hol-guard/pull/1950)) Evidence for: **runtime**: Bind path validation to CodeQL sink ([#1950](https://github.com/hashgraph-online/hol-guard/pull/1950))
- validate untrusted temporary paths lexically before filesystem resolution Evidence for: validate untrusted temporary paths lexically before filesystem resolution
- retain canonical containment checks that reject symlink escapes Evidence for: retain canonical containment checks that reject symlink escapes
- cover valid paths, traversal, relative paths, and symlink escapes Evidence for: cover valid paths, traversal, relative paths, and symlink escapes
Other changes
2- Documented change: Guard 2.2.0a66 is an opt-in prerelease cut from [`433a73b`](https://github.com/hashgraph-online/hol-guard/commit/433a73bed8c8b1b9d0941229fbbb7bc3b3bd02cc). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 2.2.0a65](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v2.2.0a65). Evidence for: Documented change: Guard 2.2.0a66 is an opt-in prerelease cut from [`433a73b`](https://github.com/hashgraph-online/hol-guard/commit/433a73bed8c8b1b9d0941229fbbb7bc3b3bd02cc). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 2.2.0a65](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v2.2.0a65).
- Merged pull request #1950: fix(runtime): bind path validation to CodeQL sink (#1950) Evidence for: Merged pull request #1950: fix(runtime): bind path validation to CodeQL sink (#1950)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v2.2.0a65
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @kantorcodes
Implementation · 1 credit
Evidence ledger1 credit
- @kantorcodesSource for kantorcodes
Implementation · Pull request author