Fix in-run hosted VEX attesting npm bundled copies (#325) - #669

Open

Mikola Lysenko (mikolalysenko) wants to merge 5 commits into

mainfrom

agent/fix-npm-hosted-bundled-assume-applied

Commits on Oct 3, 2026

Start fix for #325
Claude (claude)
committed
1f1e482
Stop in-run VEX attesting npm bundled copies
Claude (claude)
committed
9f8515f
Add changelog entry for #325
Claude (claude)
committed
89eeda8
Re-bless npm lock rewrite golden for #325
Claude (claude)
committed
4b18db6
fix(npm): ignore stale bundle flags in legacy mirrors
Mikola Lysenko (mikolalysenko)
committed
afd320e