jamesfredley commented on PR #15809: URL: https://github.com/apache/grails-core/pull/15809#issuecomment-4862309423
**Pre-release review pass (2026-07-02, dual-reviewer: GPT-5.5 oracle + Codex CLI):** APPROVE - no blocking findings. Reviewed the full diff plus local `grails-wrapper` context: HTTPS validation for all remote repo access, implicit redirect following disabled with manual re-validation of each hop, redirect cap (`MAX_REDIRECTS` = 5), missing `Location` treated as failure, local filesystem repos preserved, and the HTTPS requirement documented in `INSTALL`. `GrailsUpdaterSpec` exercises success and failure paths including redirect loops. `:grails-wrapper:test` passed locally and PR checks were green. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
