@codyswann/lisa 4.55.11 → 4.55.13

package/plugins/src/base/skills/lisa-generate-claude-remote-build-script/SKILL.md

@@ -169,7 +169,7 @@ require() { need "$1" || { echo "FATAL: required tool '$1' missing and install f
 # Resolve the PM from packageManager/engines/lockfiles — emit the manager the
 # `packageManager` inventory field reported, NEVER a hardcoded bun. An npm-only
 # project (engines.bun = "please-use-npm") must install with npm; emitting
-# `bun install` would create a stray bun.lock and break it (the SE-5221
+# `bun install` would create a stray bun.lock and break it (the package-manager selection
 # regression). Only install/PATH-export the manager actually selected below.
 detect_package_manager() {
   _field="" _forced="" _forbidden=""

package/scripts/claude-remote-setup.sh

@@ -92,7 +92,7 @@ require gitleaks
 # Resolve the package manager from packageManager/engines/lockfiles rather than
 # hardcoding bun: an npm-only project (engines.bun = "please-use-npm", CI runs
 # `npm ci`) must install with npm, never `bun install` — which would create a
-# stray bun.lock and break the project (the SE-5221 regression). jq is required
+# stray bun.lock and break the project (the package-manager selection regression). jq is required
 # above, so the package.json signals are always available here.
 # bun has known proxy package-fetch issues in cloud sessions; retry transient failures.
 detect_package_manager() {

package/typescript/copy-contents/.husky/pre-push

@@ -774,7 +774,7 @@ else
     # npm branch (`npm audit --production`) and the yarn branch
     # (`yarn audit --groups dependencies`). Without it, bun audits
     # devDependencies too and the gate fails on dev-only CVEs that never ship —
-    # the SE-5221 false positive. bun honours `--production` even though
+    # the package-manager selection false positive. bun honours `--production` even though
     # `bun audit --help` omits it from the flag list.
     # Normalize bun's transport before parsing, or this gate FAILS OPEN.
     #