Stas Shevchenko 38b73189ef [2.x] fix: Verify remote cache blobs against their digest (#9643) ...

Blobs pulled from a gRPC remote cache were written to the CAS and synced into the build without re-hashing, so a compromised cache server or plaintext MITM could substitute bytes under the requested digest. Re-hash remote blobs on write and reject on mismatch, and warn when a plaintext grpc:// endpoint is configured.

2026-08-20 12:17:24 -04:00

..

main/scala/sbt

[2.x] fix: Verify remote cache blobs against their digest (#9643)

2026-08-20 12:17:24 -04:00

test/scala/sbt/internal

[2.x] fix: Preserve '=' in remote cache header values (#9534)

2026-07-31 14:50:01 -04:00