41322909417
45%

Ran 01 Nov 2026 03:50PM UTC

Jobs 1

Files 219

Run time 1min

Badge

Embed ▾

Committed 01 Nov 2026 03:46PM UTC coverage: 45.364%. Remained the same

Build # 41322909417

Build Type

push

github

Committed by

web-flow

Commit Message

Only follow same-host https redirects when fetching runtime constraints (#2446)

* Only follow same-host https redirects when fetching runtime constraints

The constraints and freeze files decide what uv installs for astro dev
standalone, but DownloadFile used http.Get, which follows a redirect to
any host over any scheme. Give the download its own client that refuses
a redirect leaving https or the CDN host, and times out after a minute.

Co-Authored-By: Claude <noreply@anthropic.com>

* Keep a refused redirect's query out of the constraints fetch error

The client's error named the redirect target with its query, which for
a presigned URL is a credential; FetchConstraints already names the URL
it asked for, so DownloadFile returns only the cause. The host compare
also ignores case and an explicit :443.

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>

Coverage Stats

27533 of 60693 relevant lines covered (45.36%)

10.26 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	41322909417.1	01 Nov 2026 03:50PM UTC	219	45.36	GitHub Action Run

astronomer / astro-cli / 41322909417
45%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 41322909417

astronomer / astro-cli / 41322909417 45%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 41322909417

astronomer / astro-cli / 41322909417
45%

README BADGES
x