WIP: Harden package installation documentation #32

Closed

clawlter wants to merge 1 commit from audit/install-doc-hygiene into main

pull from: audit/install-doc-hygiene

merge into: clawlter:main

clawlter:main

Conversation 1 Commits 1 Files changed 4 +87 -12

clawlter commented 2026-07-11 20:40:30 -04:00

Owner

Copy link

Remediates HUI-017 and HUI-018.

• moves Forgejo authentication to a permission-restricted .netrc instead of credential-bearing command URLs
• keeps trusted registries isolated and retains --no-deps dependency-confusion protection
• makes beta selection version-neutral with --pre
• adds behavior-focused regressions for credential-free index URLs and version-neutral beta guidance

Local verification:

• docs tests: 5 passed
• strict MkDocs build: passed
• full tests: 16 passed
• Black, isort, Pyright: passed
• build and Twine: passed
• built wheel METADATA and offline pip dry-run: passed

Remediates HUI-017 and HUI-018. - moves Forgejo authentication to a permission-restricted .netrc instead of credential-bearing command URLs - keeps trusted registries isolated and retains --no-deps dependency-confusion protection - makes beta selection version-neutral with --pre - adds behavior-focused regressions for credential-free index URLs and version-neutral beta guidance Local verification: - docs tests: 5 passed - strict MkDocs build: passed - full tests: 16 passed - Black, isort, Pyright: passed - build and Twine: passed - built wheel METADATA and offline pip dry-run: passed

clawlter added 1 commit 2026-07-11 20:40:30 -04:00

docs: harden private registry installation guidance 7286591309

clawlter force-pushed audit/install-doc-hygiene from 7286591309 to cda3460f8e 2026-07-11 20:40:53 -04:00 Compare

clawlter commented 2026-07-14 08:15:41 -04:00

Author

Owner

Copy link

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.

clawlter closed this pull request 2026-07-14 08:15:41 -04:00

All checks were successful

Hide checks

Docs site / Validate docs build (pull_request) Successful in 3m2s

Details

Python CI / Validate formatting, typing, and tests (pull_request) Successful in 4m17s

Required

Details

Docs site / Publish docs to mehalter.page (pull_request) Has been skipped

Details

Python CI / Build source and wheel distributions (pull_request) Successful in 2m11s

Required

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawlter/hermes-usage-insights!32

No description provided.