mirror of
https://github.com/openai/codex.git
synced 2026-10-20 17:38:45 +00:00
## Why Curated plugin archives should preserve executable permissions without applying setuid, setgid, or sticky bits. ## What changed - Upgrade `zip` from 2.4.2 to 9.0.0, retaining the previous feature set and selecting the existing `bzip2-sys` backend explicitly. Update the Cargo and Bazel lockfiles. - Adapt plugin extraction to fallible entry names and apply Unix permissions through the open output file, using the mode filtered by `zip`. ## Testing Add a Unix regression test that encodes special permission bits directly in an archive entry and verifies that the extracted file has mode `0o755`. GitOrigin-RevId: 75ee6879a372a36b34208c1359f42b670c9d3837