Skip to content

Release 0.0.56 - #306

Merged
queil merged 7 commits into
mainfrom
release-0-0-56
Sep 29, 2026
Merged

queil merged 7 commits into
mainfrom
release-0-0-56

Conversation

@queil

@queil queil commented Sep 29, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@strix-security

strix-security Bot commented Sep 29, 2026 •

Copy link
Copy Markdown

Strix Security Review

No security issues found.

Review summary

Reviewed all 12 changed files, with deep analysis of the 7 security-relevant source files (Builtins.fs, Complete.fs, Eval.fs, Fmt.fs, Parser.fs, Repl.fs, Script.fs). This is a bug-fix release (v0.0.56) with correctness and UX improvements: eval-time cwd capture for ls/pwd/glob, completion inside interpolation strings, paren-aware match arm formatting, correct alias resolution to the cd builtin, history erasedups deduplication, and parse-error token deduplication. No user-controlled input reaches a dangerous sink in any new path, and no new secrets, injection, deserialization, path traversal, SSRF, or auth/authorization changes were introduced. The formatter change does not introduce an unhandled exception (Substring at an index equal to length is valid in .NET), and the completion scanner is bounded and linear-time. No security vulnerabilities were identified.

Updated for 269ef49.


Reviewed by Strix
Re-run review · Configure security review settings

@queil
queil merged commit 69251b4 into main Sep 29, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant