Exact

Exact Union RegExp

Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Transaction Science 5fc8779968 sec: RUSTSEC-2026-0429, a zip archive that aborts the process on extract ... `ZipArchive::extract` sizes a symlink target's buffer from the size the archive declares, so a 112-byte archive aborts the process. Fixed in zip 9. The audit went red on every open PR when the advisory was published. Two lockfiles move: wai-quantum-desktop: tauri-plugin-updater 2.14.0 -> 2.14.1. Its source is unchanged; it asks for zip 9. This was the only copy that runs `extract` in a shipped program, on Windows, on an update package whose signature has already been checked. wai-rs: c2pa 0.90 -> 0.91, behind `c2pa_emit`. This also takes elliptic-curve 0.14, so the workspace holds no crypto-bigint 0.5. Four copies stay, each read at its call site and allowed at its exact version: open_board_format and candle-core never call `extract`, and webrtc-sys-build calls it in a build script, on its own download. The build crate's next releases change which libwebrtc it downloads, so it moves with livekit. The comment over the older zip entries said nothing in this tree extracts an archive. It was wrong: the updater did, and the build script does. It now says what is true. Co-Authored-By: Claude Opus 5.5 <[email protected]>		2026-11-02 06:31:12 -05:00
..
check-advisories-selftest.sh	sec: answer the gate's first catch — two constant-time advisories, and pin an allowance to the version it excuses	2026-10-24 20:06:05 -04:00
check-advisories.py	sec: RUSTSEC-2026-0429, a zip archive that aborts the process on extract	2026-11-02 06:31:12 -05:00
check-comparative-prose.sh	Public-text checks: the OER/2 documents and corpus are checked like any other file	2026-10-29 22:28:00 -04:00
check-fabric-errors.py	jouleclaw-omni: metal compiles — 45 -> 0, write the 21 missing kernels	2026-10-20 04:33:42 -04:00
check-lockfiles-selftest.sh	scripts: no pipe into grep -q under pipefail	2026-10-15 01:52:03 -04:00
check-lockfiles.sh	joule-code: vendor wtransport 0.7.2 as published, patched in	2026-10-20 04:54:03 -04:00
check-metal-shaders.py	check-metal-shaders: stop being coupled to raw-string style, and refuse to check almost nothing	2026-10-20 08:52:06 -04:00
check-no-vanity-metrics.sh	docs + no-vanity-metrics: reword two counts, fix scanner false positive	2026-06-13 22:14:13 -04:00
check-orphan-sources.py	jouleclaw-omni: declare 23 modules that were compiled by nothing	2026-10-18 07:19:24 -04:00
check-public-names.sh	Public-text checks: the OER/2 documents and corpus are checked like any other file	2026-10-29 22:28:00 -04:00
check-spec-refs-selftest.sh	ci: a citation to a section that does not exist is now a failure	2026-10-13 03:07:23 -04:00
check-spec-refs.py	ci: a citation to a section that does not exist is now a failure	2026-10-13 03:07:23 -04:00
check-tests-in-ci-selftest.sh	scripts: no pipe into grep -q under pipefail	2026-10-15 01:52:03 -04:00
check-tests-in-ci.py	ci: every wai-rs test file is run by a job or listed, and none can run empty	2026-10-13 01:20:48 -04:00
check-wai-ops-doors-selftest.sh	wai ops: the command line carries only the operations it implements; the door check reads a tool table by operation	2026-10-27 05:12:08 -04:00
check-wai-ops-doors.py	wai ops: the command line carries only the operations it implements; the door check reads a tool table by operation	2026-10-27 05:12:08 -04:00
check-wai-section-refs.py	check-wai-section-refs: read wai/SECURITY.md too	2026-10-09 17:15:06 -04:00
check-workflow-concurrency-selftest.sh	ci: one job for the repository's script checks	2026-10-14 12:05:46 -04:00
check-workflow-concurrency.sh	ci: guard the concurrency groups, and stop the dev Mac serving 13 of 21 contexts	2026-10-05 12:18:21 -04:00
install-hooks.sh	ci: no-vanity-metrics scanner + pre-commit hook + CHARTER policy	2026-06-02 10:39:43 -04:00
pr-touches-paths-selftest.sh	pr-touches-paths: a comment inside a path list no longer ends it	2026-10-14 04:21:43 -04:00
pr-touches-paths.py	pr-touches-paths: a comment inside a path list no longer ends it	2026-10-14 04:21:43 -04:00
standards-touched-selftest.sh	scripts: no pipe into grep -q under pipefail	2026-10-15 01:52:03 -04:00
standards-touched.py	ci: the standards build builds the workspaces a change touches	2026-10-14 03:40:08 -04:00
test-public-text-checks.sh	check-public-names: read file arguments from the caller's directory; name a file it cannot read	2026-10-21 15:19:18 -04:00
wai-quantum-webgpu-member.sh	wai-quantum fabric: run meters, metered calibration, place_for, and the Fabric wrapper	2026-10-12 05:08:11 -04:00