PT-2026-67592

Summary The OpenAPI adapter's spec-change poller OpenApiSpecPoller re-fetched the configured spec url on a timer using a raw global fetch, bypassing the SSRF guard safeFetch / assertUrlSafe that OpenAPIToolGenerator.fromURL applies to the initial spec load. As a result, the pinning/DNS-resolution...