Snider 175701fc93 fix(security): lock refreshMarketplace to canonical index path, isolate HOME in iter test ... - pkg/api/provider.go: remove refreshRequest struct and filepath-based sanitisation; always load marketplace/index.json via a package-level const so callers cannot influence which file is read (path traversal fix) - forge/orgs_test.go: add t.Setenv("HOME", t.TempDir()) to TestClient_ListMyOrgsIter_Bad_ServerError to prevent config bleed between test runs Co-Authored-By: Virgil <virgil@lethean.io>		2026-04-07 11:30:04 +01:00
..
api	fix(security): lock refreshMarketplace to canonical index path, isolate HOME in iter test	2026-04-07 11:30:04 +01:00