fix: always derive GH_HOST from GITHUB_SERVER_URL to prevent proxy leakage#1493

Merged

lpcox merged 6 commits intomainfrom

copilot/fix-gh-host-proxy-passthrough

Mar 29, 2026

Commits on Mar 29, 2026

fix: always derive GH_HOST from GITHUB_SERVER_URL to prevent proxy leakage

lpcox
and
Copilot
committed
fix: replace xpia.md with safe inline policy to prevent cyber_policy_violation in Codex workflows (#1494)
Copilot
authored
fix: use neutral policy language in SAFE_XPIA_CONTENT (#1495)
Copilot
authored
fix: clarify GH_HOST comment and fix misleading debug log message
Copilot
authored
chore: fix npm audit vulnerabilities (handlebars, brace-expansion)

lpcox
and
Copilot
committed
fix: resolve CodeQL file-system-race in postprocess script

lpcox
and
Copilot
committed