fix(labeler): notification contact-resolution, unsubscribe, and verification-trust fixes (review round 1)#2116

Merged

ascorbic merged 8 commits into

feat/plugin-registry-labelling-servicefrom

fix/notifications-sol-r1

Jul 18, 2026

Commits on Jul 18, 2026

fix(labeler): honor RFC 8058 one-click unsubscribe query param
ascorbic
committed
fix(labeler): resolve package contacts for release-subject notices
ascorbic
committed
fix(labeler): alert operators when a takedown notice has no contact
ascorbic
committed
fix(labeler): gate double-opt-in bypass on trusted, current verification
ascorbic
committed
fix(labeler): make takedown no-contact alert recoverable
ascorbic
committed
fix(labeler): scope unsubscribe query fallback, keep confirm body-only
ascorbic
committed
fix(labeler): validate release rkey shape; make no-contact alert dedup atomic
ascorbic
committed
fix(labeler): scope dedup index to takedown-no-contact; require semver
ascorbic
committed