slachiewicz opened a new pull request, #2099: URL: https://github.com/apache/maven-resolver/pull/2099
Follow-up to the review notes on #2089 and #2091: `SummaryFileTrustedChecksumsSource` splices the repository key into the summary file name without the point-of-use validation the sparse source received, so this adds the same `PathUtils.validatePathComponent` guard. The built-in key functions already sanitize; the guard matters for custom `RepositoryKeyFunction` implementations, and the new test wires a non-sanitizing key function to exercise it. Also adds the `GAECVNameMapperTest` that was noted as missing. Verified: `mvn -pl maven-resolver-impl -am test` → 575 tests, 0 failures. *This change was created with AI assistance.* https://claude.ai/code/session_01Xn8c3cREgy9qN59nJ3y6cz -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
