chore(install): verify downloaded tarball integrity + enforce HTTPS#1221

Merged

John-David Dalton (jdalton) merged 3 commits intomainfrom

chore/harden-installer

Apr 17, 2026

Commits on Apr 17, 2026

chore(install): verify downloaded tarball integrity + enforce HTTPS
John-David Dalton (jdalton)
committed
fix(install): harden integrity parsing and drop xxd dependency
John-David Dalton (jdalton)
committed
fix(install): close wget HTTPS-downgrade gap with --max-redirect=0
John-David Dalton (jdalton)
committed