COMMITS
May 18, 2026
D
build(deps): bump brace-expansion from 5.0.5 to 5.0.6 (#445)
dependabot[bot] committed
May 11, 2026
D
build(deps): bump electron/github-app-auth-action from 2.0.0 to 2.1.0 (#439)
dependabot[bot] committed
May 7, 2026
D
build: restore packageManager and resolutions fields in package.json (#444)
David Sanders committed
May 1, 2026
D
build(deps): bump dsanders11/project-actions from 2.0.0 to 2.0.1 (#440)
dependabot[bot] committed
D
build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#441)
dependabot[bot] committed
D
build: run yarn dedupe (#442)
David Sanders committed
April 30, 2026
D
build(dev-deps): bump vitest to 4.1.5 (#438)
David Sanders committed
April 22, 2026
S
fix: replace commander with native Node.js parseArgs (#416)
Samuel Attard committed
April 20, 2026
E
build: TS6 + oxc.rs (#437)
Erick Zhao committed
April 13, 2026
D
build(deps): bump vite from 7.1.11 to 7.3.2 (#435)
dependabot[bot] committed
April 9, 2026
D
build(dev-deps): replace fsevents with forked version (#434)
David Sanders committed
April 4, 2026
S
chore: resolve dependabot security alerts (#433)
Samuel Attard committed
D
build(deps): bump brace-expansion from 5.0.2 to 5.0.5 (#432)
dependabot[bot] committed
April 3, 2026
D
build(deps-dev): bump electron from 35.7.5 to 39.8.4 (#431)
dependabot[bot] committed
S
fix: add DoS validation for asar archive headers and file entries (#419)
Samuel Attard committed
S
fix: improve symlink validation to prevent directory traversal attacks (#422)
Samuel Attard committed
S
fix: add path validation to prevent directory traversal attacks (#418)
Samuel Attard committed
S
fix: add offset validation to readFileSync to prevent out-of-bounds reads (#420)
Samuel Attard committed
S
fix: add header validation for ASAR archives (#421)
Samuel Attard committed
S
fix: add circular symlink detection and depth limit protection (#423)
Samuel Attard committed
April 2, 2026
D
build(deps): bump azure/cli from 2.2.0 to 3.0.0 (#430)
dependabot[bot] committed
April 1, 2026
D
build(deps): bump azure/login from 2.3.0 to 3.0.0 (#427)
dependabot[bot] committed
D
build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#429)
dependabot[bot] committed
D
build(deps): bump dsanders11/project-actions from 1.7.0 to 2.0.0 (#428)
dependabot[bot] committed
March 31, 2026
E
D
build(deps): bump picomatch from 2.3.1 to 2.3.2 (#426)
dependabot[bot] committed
S
build: add tsx to devDependencies (#425)
Samuel Attard committed
March 28, 2026
S
perf: 5-7x faster packing, 15-20% faster extraction (#414)
Samuel Attard committed
March 24, 2026
S
test: split robustness-spec into module-focused spec files (#417)
Samuel Attard committed
S
fix: pickle resize overflow, stream flush race, integrity block boundary (#413)
Samuel Attard committed