Dashboard › cli › Distillation
30ba3ad2-fbc2-4292-b13f-d738265ffb03["lore_tm_v1_6xI5n_Lu0ffUqh2xvJhJMdIoozCaAYnTFPgwFRoooX0"]
cea7b2afba91f11f1cdbb1785ea97ba61159520c by Burak Yigit Kaya (byk@sentry.io), titled fix(cli): validate release response shapes, changed packages/cli/src/lib/ghcr.ts; authored and committed at Thu Sep 10 04:35:48 2026 +0000.extractReleaseVersions(data, source) now accepts data: unknown and validates the GitHub release-response shape according to source.tagPrefix: sources with a tag prefix require an array response, while sources without one require a non-array response. A mismatch throws UpgradeError("network_error", "GitHub returned invalid release metadata"), replacing the prior behavior that accepted either shape for every source.extractReleaseVersions() converts a non-array response into a one-item array and discards entries that are not non-null objects via a Record<string, unknown> type guard before reading draft, prerelease, or tag_name.source.tagPrefix, strips the source prefix and VERSION_PREFIX_REGEX, retains only valid non-prerelease semantic versions, and sorts versions descending with compareVersions(b, a).