Files
mudler-agentandEttore Di Giacinto 7903a9fce0 fix(addons): verify the platform child of an add-on index (#12943)
Stage pinned the index digest but compared the fetched platform
image's digest against it. The fetched image is the child, so every
install of a multi-platform add-on failed.

Compare the fetched image with the child the index lists for the
release OS and architecture. A single manifest still must equal the
pinned digest, and an index without the platform is refused. The
signature and the receipt keep the index digest.

Assisted-by: Claude:claude-sonnet-5-5 [Claude Code]

Signed-off-by: Ettore Di Giacinto <mudler@localai.io>
Co-authored-by: Ettore Di Giacinto <mudler@localai.io>
2026-10-27 16:24:57 +01:00
..
2026-03-30 00:47:27 +02:00