From 7737194b3cec1779e8ba9eb472415d235046eb56 Mon Sep 17 00:00:00 2001 From: Ivan Date: Sun, 19 Jul 2026 05:34:16 -0500 Subject: [PATCH] chore: update Micron-Parser-Go version to v1.0.6 in various configuration files and locales --- meshchatx.rsm | Bin 156733 -> 156733 bytes .../settings/MicronWasmUpdateModal.vue | 2 +- meshchatx/src/frontend/locales/en.json | 2 +- .../vendor/micron-parser-go/integrity.json | 4 ++-- scripts/deps-allowlist.json | 2 +- scripts/micron-parser-go-version.mjs | 2 +- tests/backend/test_safe_path_under_dir.py | 2 +- .../test_security_path_jail_regressions.py | 4 +++- 8 files changed, 10 insertions(+), 8 deletions(-) diff --git a/meshchatx.rsm b/meshchatx.rsm index a574accc0f682da384ab7bd70ef916840dff1737..c51b9c4b74f818fd8a37620c49b422dfa01f8ad4 100644 GIT binary patch delta 568 zcmWlWJ7|J9nOn>?T%m-D0sZAcUE@GopniqF^Bi79ofj zWQCuoAXXxXAR>Pu0qquSRE#7BL@ZKRXlL!%U(Wfyb5{nG=2a^8B6iY46(R;iGe%p*M~D ztSlUAacmo_XI@-;*E{~|#>+3Ql)UuWSP9%&a4uzV z+$#lIS&}Xrkdnwtr^v>Hi93pl&?_w=h*+^PHrAhexU2v8Yx8w~^<1Z&GkGKdUIY(H zMrRO-$Y~%h5u-#4JPP#L<{Y$h#Dggi3Jqn+dG+)l8?VodvyoG+98-=NKtzjzoD`gb zKp`;+)GlBO4!K9pb4rnn&^dY;ljKfDrBeNf*oEzF?J^-a@KQRA#U_OiC52*w7PYZi z8kY-92#`}mODdGs0%n6QF7?z!*16JFJUMQ`M;(#?)REALG6`{m+D7jMaGiBhnzR-v zDiAsH;Jge$>1?asEw-=zxyB~9o=i>&p-Nl~)@Uiv{pTrukPO#amCZGY(x83$OF0P& dJb*?kl&#)>XQS1VZ>&*`Y_J{m!Un4s{{bSAwJrbv delta 572 zcmWlVIct?c6o&bNLN1C%K}mv$3RV`*cFvh;yw{~kqD5SSq6jl{<^(}8A%zxVNZ}F? zA>QH=m2_e!L>*}7$7X8Y9CnKAwA?f0Rtt(`MtgF`p)^XNcpWd6YBm8ENQ z&4E4Rb5Bp)?7d7YuXm02oI1a7aQM#vo;!JQ`sb@zGu!`r@%poOO_NxQvdr08wj9}M z!_h^T#OZ8Ayd)~R7!<20iE>apupkvxM71Zs4Yns9ZfZaN(0I{)e|DrOz*3DyT|udeMg%nqZo`vLr7Lf z<(y)KY|#OecH&Uw^?4E^qhujWkVsk7QKF6AM_i3>Xc1-xlLJK0kk&sEpbI(~=M^VY zC}>B4gJDHTnruyv_0t+2OETRfm#UGgtwM!K1#NuD-fJMCkcf&$DdcM*#3+a=Wy3mn zBicv}_o=ql3hazdS3A02K30c&nrzVJk|ZW@HiNOnk*j+bUy==k7P9!dpph5|RE|+$ fR;6wSQnc+%-m7+Y7Cu#tPTyL!v3q;1>fZeipRKxt diff --git a/meshchatx/src/frontend/components/settings/MicronWasmUpdateModal.vue b/meshchatx/src/frontend/components/settings/MicronWasmUpdateModal.vue index 206fc058..6e0b499c 100644 --- a/meshchatx/src/frontend/components/settings/MicronWasmUpdateModal.vue +++ b/meshchatx/src/frontend/components/settings/MicronWasmUpdateModal.vue @@ -137,7 +137,7 @@ export default { computed: { defaultTag() { const t = import.meta.env.VITE_MICRON_PARSER_GO_RELEASE; - return typeof t === "string" && t.trim() ? t.trim() : "v1.0.5"; + return typeof t === "string" && t.trim() ? t.trim() : "v1.0.6"; }, downloadBase() { return MICRON_PARSER_GO_RELEASE_DOWNLOAD_BASE; diff --git a/meshchatx/src/frontend/locales/en.json b/meshchatx/src/frontend/locales/en.json index 73a4d75f..e21aa8a8 100644 --- a/meshchatx/src/frontend/locales/en.json +++ b/meshchatx/src/frontend/locales/en.json @@ -1895,7 +1895,7 @@ "micron_wasm_update_upload_heading": "Install from file", "micron_wasm_update_upload_warning": "Uploaded WASM is not authenticity-checked. Only use files you trust.", "micron_wasm_update_revert_bundled": "Remove override (use bundled WASM)", - "micron_wasm_update_err_empty_tag": "Enter a release tag (for example v1.0.5).", + "micron_wasm_update_err_empty_tag": "Enter a release tag (for example v1.0.6).", "micron_wasm_update_err_not_wasm": "Choose a file whose name ends with .wasm.", "micron_wasm_update_err_too_large": "That file is too large to store as a runtime override.", "micron_wasm_update_err_too_small": "That file is too small to be a valid WASM module.", diff --git a/meshchatx/src/frontend/public/vendor/micron-parser-go/integrity.json b/meshchatx/src/frontend/public/vendor/micron-parser-go/integrity.json index 4e4d144f..5bb91389 100644 --- a/meshchatx/src/frontend/public/vendor/micron-parser-go/integrity.json +++ b/meshchatx/src/frontend/public/vendor/micron-parser-go/integrity.json @@ -1,6 +1,6 @@ { - "version": "v1.0.5", - "wasm": "sha384-E16yCcmQKfjrg2OxZQ2uY8ZnQoJvQK9y7NmH4BJOO8qO5Eg677HPie1AbZqWKfcK", + "version": "v1.0.6", + "wasm": "sha384-v8PajPnZcEzOx9l7nBD+cV9zvpJbmgHyWOmeRW9KXCJ2Z7g0S7mRIBAvIHXElH9B", "wasmExec": "sha384-PWCs+V4BDf9yY1yjkD/p+9xNEs4iEbuvq+HezAOJiY3XL5GI6VyJXMsvnjiwNbce", "wasmExecSourceUrl": "https://raw.githubusercontent.com/golang/go/go1.26.2/lib/wasm/wasm_exec.js", "wasmExecEtag": "W/\"97232acf11bb7ff454a8c640d2a6c59e000ceebfee1e4478f2f250d98618a007\"" diff --git a/scripts/deps-allowlist.json b/scripts/deps-allowlist.json index 62537509..5dce26bd 100644 --- a/scripts/deps-allowlist.json +++ b/scripts/deps-allowlist.json @@ -24,7 +24,7 @@ { "name": "micron-parser-go-wasm", "pattern": "https://github.com/Quad4-Software/Micron-Parser-Go/releases/download/*/micron-parser-go.wasm", - "pinned_tag": "v1.0.5", + "pinned_tag": "v1.0.6", "tag_source": "scripts/micron-parser-go-version.mjs" }, { diff --git a/scripts/micron-parser-go-version.mjs b/scripts/micron-parser-go-version.mjs index ade51a88..d4c5b46f 100644 --- a/scripts/micron-parser-go-version.mjs +++ b/scripts/micron-parser-go-version.mjs @@ -2,4 +2,4 @@ * Micron-Parser-Go release tag for default WASM URL (scripts/fetch-micron-wasm.mjs) * and build-time tooltip copy (VITE_MICRON_PARSER_GO_RELEASE). */ -export const MICRON_PARSER_GO_RELEASE_TAG = "v1.0.5"; +export const MICRON_PARSER_GO_RELEASE_TAG = "v1.0.6"; diff --git a/tests/backend/test_safe_path_under_dir.py b/tests/backend/test_safe_path_under_dir.py index edbd6f06..8111ed33 100644 --- a/tests/backend/test_safe_path_under_dir.py +++ b/tests/backend/test_safe_path_under_dir.py @@ -24,7 +24,7 @@ def test_safe_path_under_dir_rejects_nul_and_dot(tmp_path): def test_safe_path_under_dir_rejects_symlink_escape(tmp_path): - """realpath containment must reject basename symlinks that leave the jail.""" + """Reject basename symlinks whose real path leaves the jail.""" outside = tmp_path / "outside.secret" outside.write_bytes(b"secret") jail = tmp_path / "jail" diff --git a/tests/backend/test_security_path_jail_regressions.py b/tests/backend/test_security_path_jail_regressions.py index e34aee23..55ad54c5 100644 --- a/tests/backend/test_security_path_jail_regressions.py +++ b/tests/backend/test_security_path_jail_regressions.py @@ -182,7 +182,9 @@ async def test_rncp_send_path_jails_and_blocks_identity(tmp_path, monkeypatch): fake_home = tmp_path / "home" fake_home.mkdir() monkeypatch.setenv("HOME", str(fake_home)) - monkeypatch.setattr(os.path, "expanduser", lambda p: str(fake_home) if p == "~" else p) + monkeypatch.setattr( + os.path, "expanduser", lambda p: str(fake_home) if p == "~" else p + ) outside_root = tmp_path.parent / "rncp-outside-root" outside_root.mkdir(exist_ok=True)