Mirrors/filebrowser
1
0
Fork 0
mirror of https://github.com/filebrowser/filebrowser.git synced 2026-07-25 08:54:13 +00:00
Code Issues Projects Releases Wiki Activity

docs: update CLAUDE.md

Browse source
This commit is contained in:
Henrique Dias 2026-07-25 08:47:34 +02:00
parent 392253c563
commit 660d84661d
No known key found for this signature in database
1 changed files with 8 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
.claude/CLAUDE.md
View file

@ -100,11 +100,16 @@ gh api -X PATCH .../security-advisories/GHSA-xxxx-xxxx-xxxx \
## 7. Set affected & patched versions
The package is always `{ecosystem: "go", name: "github.com/filebrowser/filebrowser/v2"}`.
`patched_versions` must be the release that will actually ship the fix (cut it — it does not exist just
because the branch does).
- `vulnerable_version_range` — `<= <latest released version>` (the newest tag; find it with
`git tag --list 'v2.*' --sort=-version:refname | head -1`).
- `patched_versions` — the **next** release that will actually ship the fix. It doesn't exist just
because the branch does; it still has to be cut. **When unsure which version that will be, ask.**
Replace the placeholder versions below before sending:
```bash
printf '%s' '{"vulnerabilities":[{"package":{"ecosystem":"go","name":"github.com/filebrowser/filebrowser/v2"},"vulnerable_version_range":"<= 2.63.18","patched_versions":"2.63.19","vulnerable_functions":[]}]}' \
printf '%s' '{"vulnerabilities":[{"package":{"ecosystem":"go","name":"github.com/filebrowser/filebrowser/v2"},"vulnerable_version_range":"<= <latest>","patched_versions":"<next>","vulnerable_functions":[]}]}' \
| gh api -X PATCH .../security-advisories/GHSA-xxxx-xxxx-xxxx --input -
```