Repository navigation

Audit hardening: dependencies, TUI correctness and speed, query fixes, CI and release - #94

Closed

nicholasjpaterno wants to merge 90 commits into

mainfrom

audit/hardening

Closed

Audit hardening: dependencies, TUI correctness and speed, query fixes, CI and release#94
nicholasjpaterno wants to merge 90 commits into
mainfrom
audit/hardening

Commits on Oct 11, 2026
- deps: turbovault-parser 3.2.0 and everything else to latest
  
  nicholasjpaterno
  and
  claude
  committed
  138b552
- ci: drop the quick-xml advisory ignores
  
  nicholasjpaterno
  and
  claude
  committed
  a335364
- fix(cli): read piped stdin when no file is named
  
  nicholasjpaterno
  and
  claude
  committed
  2f1b4bc
- fix(cli): linear line numbering, quiet broken pipes, and fetch timeouts
  
  nicholasjpaterno
  and
  claude
  committed
  0f56494
- fix(cli): show a document's control characters instead of sending them
  
  nicholasjpaterno
  and
  claude
  committed
  23c63c7
- fix(tui): keep the terminal intact when isolated work panics
  
  nicholasjpaterno
  and
  claude
  committed
  e991381
- fix(tui): refuse image paths that are not regular files, and huge GIFs
  
  nicholasjpaterno
  and
  claude
  committed
  1fe753d
- fix(tui): stream GIFs in the viewer, and drop native Kitty playback
  
  nicholasjpaterno
  and
  claude
  committed
  34da96c
- fix(tui): lay out mermaid diagrams off the UI thread
  
  nicholasjpaterno
  and
  claude
  committed
  db71c3a
- fix(tui): save without losing permissions, other edits, or the config
  
  nicholasjpaterno
  and
  claude
  committed
  2e6b277
- fix(tui): hold every file link to one boundary
  
  nicholasjpaterno
  and
  claude
  committed
  92b6b4b
- fix(tui): edit the table cell that was selected, and undo it exactly
  
  nicholasjpaterno
  and
  claude
  committed
  afd9965
- ci: test the minimal build, check the docs, and run weekly
  
  nicholasjpaterno
  and
  claude
  committed
  90667f8
- feat(tui): let links climb within the document's repository
  
  nicholasjpaterno
  and
  claude
  committed
  60f3611
- perf(tui): lay the content pane out once, and place everything by it
  
  nicholasjpaterno
  and
  claude
  committed
  6eadd75
- ci: pin every action to a full commit SHA
  
  nicholasjpaterno
  and
  claude
  committed
  949fce1
- ci: replace cargo-audit with cargo-deny
  
  nicholasjpaterno
  and
  claude
  committed
  9a0c6b2
- ci: build the musl binary and run it on Alpine for every PR
  
  nicholasjpaterno
  and
  claude
  committed
  213acc3
- release: run CI on the tagged commit before building anything
  
  nicholasjpaterno
  and
  claude
  committed
  c4be488
- release: refuse to publish an unsigned or unnotarized macOS binary
  
  nicholasjpaterno
  and
  claude
  committed
  18b699a
- release: smoke-test each binary and package reproducibly with the man page
  
  nicholasjpaterno
  and
  claude
  committed
  0e63d42
- release: attest build provenance for the release archives
  
  nicholasjpaterno
  and
  claude
  committed
  0bc3393
- chore: remove build-all.sh and the justfile emojis
  
  nicholasjpaterno
  and
  claude
  committed
  5ecc2c7
- feat(tui): suspend on Ctrl+Z, and restore the terminal on SIGTERM/SIGHUP
  
  nicholasjpaterno
  and
  claude
  committed
  b1df130
- fix(config): skip a bad keybinding instead of the whole file, and save in place
  
  nicholasjpaterno
  and
  claude
  committed
  c9dc90b
- fix(tui): leave image protocol detection to ratatui-image
  
  nicholasjpaterno
  and
  claude
  committed
  f94e474
- refactor(query): remove the empty builtin stub modules
  
  nicholasjpaterno
  and
  claude
  committed
  11815e7
- fix(query): read a key before treating .name as an element selector
  
  nicholasjpaterno
  and
  claude
  committed
  f540e7d
- fix(query): scope selectors under a heading, for every element kind
  
  nicholasjpaterno
  and
  claude
  committed
  060cd86
- fix(query): parse a dot followed by an operator as the identity
  
  nicholasjpaterno
  and
  claude
  committed
  db143ac
- fix(query): run collection functions once on a piped stream
  
  nicholasjpaterno
  and
  claude
  committed
  5bad80e
- fix(query): read a string key in sort_by and group_by as a property
  
  nicholasjpaterno
  and
  claude
  committed
  6b60433
- fix(query): serialize values to JSON one way
  
  nicholasjpaterno
  and
  claude
  committed
  7f1576b
- fix(query): print JSON results as an array whatever their count
  
  nicholasjpaterno
  and
  claude
  committed
  a26a79e
- fix(query): apply link-type filters to links only
  
  nicholasjpaterno
  and
  claude
  committed
  18f3c7b
- fix(query): sort and deduplicate values by type, not by text
  
  nicholasjpaterno
  and
  claude
  committed
  18bb697
- fix(query): index each array in a stream, as jq does
  
  nicholasjpaterno
  and
  claude
  committed
  db84b35
- feat(query): add .children and .parent to headings
  
  nicholasjpaterno
  and
  claude
  committed
  0a729e2
- fix(query): line up the error caret after non-ASCII text
  
  nicholasjpaterno
  and
  claude
  committed
  6cbd7e4
- fix(query): describe a function's argument count in words
  
  nicholasjpaterno
  and
  claude
  committed
  967c268
- fix(query): stop printing a blank line after every error
  
  nicholasjpaterno
  and
  claude
  committed
  c902767
- fix(query): refuse calls to the internal _pipe and _index forms
  
  nicholasjpaterno
  and
  claude
  committed
  fdffa01
- fix(query): make == type-strict, as in jq
  
  nicholasjpaterno
  and
  claude
  committed
  9eb555a
- fix(query): return the input from an if with no else, as jq does
  
  nicholasjpaterno
  and
  claude
  committed
  68f7506
- fix(query): bound nth's index instead of overflowing it
  
  nicholasjpaterno
  and
  claude
  committed
  eec2fff
- fix(query): accept not as a pipe stage
  
  nicholasjpaterno
  and
  claude
  committed
  6caf0f9
- docs(query): bring --query-help in line with the language
  
  nicholasjpaterno
  and
  claude
  committed
  c2b378d
- docs(query): rewrite the query guide against current behavior
  
  nicholasjpaterno
  and
  claude
  committed
  0bca96b
- docs(query): remove the pre-implementation design document
  
  nicholasjpaterno
  and
  claude
  committed
  9d0d1f2
- docs(skill): correct the CLI matching rules and the tql reference
  
  nicholasjpaterno
  and
  claude
  committed
  b881792
- docs(readme): match the query section to the language
  
  nicholasjpaterno
  and
  claude
  committed
  1bc6edc
- fix(cli): print [] for a query that matches nothing as JSON
  
  nicholasjpaterno
  and
  claude
  committed
  4c46e47
- perf(tui): bound inline image memory, and drop dead GIF playback state
  
  nicholasjpaterno
  and
  claude
  committed
  3935669
- fix(tui): keep the palette and link picker selection in view
  
  nicholasjpaterno
  and
  claude
  committed
  a7d759c
- refactor(tui): drop dead modes and duplicated state, and route the wheel by mode
  
  nicholasjpaterno
  and
  claude
  committed
  ab3f9b5
- fix(tui): status expiry, tabs, help scrolling, watcher cost, cursor restore
  
  nicholasjpaterno
  and
  claude
  committed
  04f2057
- fix(cli): reject misuse, print when not on a terminal, and find any README
  
  nicholasjpaterno
  and
  claude
  committed
  125b17e
- fix(tui): keep fetched documents off the local filesystem, and cap highlighting
  
  nicholasjpaterno
  and
  claude
  committed
  eec6ac6
- docs: bring the README in line with treemd's behavior
  
  nicholasjpaterno
  and
  claude
  committed
  768fc2d
- test(keybindings): hold the keymap to no duplicates and no dead actions
  
  nicholasjpaterno
  and
  claude
  committed
  2cbcec3
- test: property tests over generated input, and the table bug they found
  
  nicholasjpaterno
  and
  claude
  committed
  5681259
- docs(lib): hide the binary-only modules from the library docs
  
  nicholasjpaterno
  and
  claude
  committed
  78244fc
- docs(changelog): order the Unreleased sections like past releases, note the library docs
  
  nicholasjpaterno
  and
  claude
  committed
  4947ae4
Commits on Oct 12, 2026
- fix(tui): keep keys from a terminal that does not answer the image probe
  
  nicholasjpaterno
  and
  claude
  committed
  29d2c72
- fix(tui): read keys from /dev/tty with poll, so piped input works on macOS
  
  nicholasjpaterno
  and
  claude
  committed
  4ae0c52
- deps: signal-hook 0.4
  
  nicholasjpaterno
  and
  claude
  committed
  0acd37c
Commits on Oct 13, 2026
- fix(tui): re-read the document after a cell edit, and filter only what needs it
  
  nicholasjpaterno
  and
  claude
  committed
  1f31ceb
- ci: run doc examples and clippy on the minimal build; add `just gate`
  
  nicholasjpaterno
  and
  claude
  committed
  2cd4220
- fix(tui): survive Ctrl+C in the editor, clear without querying, signals from startup
  
  nicholasjpaterno
  and
  claude
  committed
  d7cb122
- fix(tui): keep unsaved edits safe across the editor, picker, discard and reload
  
  nicholasjpaterno
  and
  claude
  committed
  fdd2767
- fix(config): never save over an unreadable file, save reverts, keep inline tables
  
  nicholasjpaterno
  and
  claude
  committed
  f3b2a0a
- fix(parser,query): line numbers, section ends, frontmatter, comparisons, and scoping cost
  
  nicholasjpaterno
  and
  claude
  committed
  d28dd5e
- fix(input): hold every read to the size limit, and fetches after decompression
  
  nicholasjpaterno
  and
  claude
  committed
  a41a1b2
- fix(images): keep a gallery's images, bound decoding, seek GIFs off the UI thread
  
  nicholasjpaterno
  and
  claude
  committed
  0384fbe
- fix(tui): keys act on the mode they are pressed in, and namesake headings stay apart
  
  nicholasjpaterno
  and
  claude
  committed
  2a34c2d
- fix(cli): one mode at a time, listing options need a listing, and smaller CLI fixes
  
  nicholasjpaterno
  and
  claude
  committed
  c29f0dd
- release: build glibc targets for 2.28, require every target, and run packaging in CI
  
  nicholasjpaterno
  and
  claude
  committed
  b4e3125
- feat(query): jq's arithmetic, slices, missing keys and exit codes
  
  nicholasjpaterno
  and
  claude
  committed
  996ba1b
- fix(security): keep a piped document's images and links in the working directory
  
  nicholasjpaterno
  and
  claude
  committed
  8567d2b
- feat(anchors): GitHub's heading anchors as a config option, and follow either
  
  nicholasjpaterno
  and
  claude
  committed
  c34726f
- fix(parser): a bare CR ends a line
  
  nicholasjpaterno
  and
  claude
  committed
  a5e0374
- fix(save): refuse read-only files, keep hard links and dangling symlinks
  
  nicholasjpaterno
  and
  claude
  committed
  82c72ea
- perf(images): decode inline images on the image worker
  
  nicholasjpaterno
  and
  claude
  committed
  f6acd3e
- refactor(tui): remove unused App methods
  
  nicholasjpaterno
  and
  claude
  committed
  af20608
- refactor(tui): split app.rs into modules by concern
  
  nicholasjpaterno
  and
  claude
  committed
  0f5a455
- refactor(tui): the image viewer is a keybinding mode
  
  nicholasjpaterno
  and
  claude
  committed
  df6633d
- refactor(tui): help and the theme picker are one overlay
  
  nicholasjpaterno
  and
  claude
  committed
  7e23b03
- refactor(tui): the outline search is one state, not two flags
  
  nicholasjpaterno
  and
  claude
  committed
  4e010a9
- refactor(tui): text input goes to the field the keybinding mode names
  
  nicholasjpaterno
  and
  claude
  committed
  c4b04c2
- docs(changelog): file the paste limit under Fixed
  
  nicholasjpaterno
  and
  claude
  committed
  ee537e6

Commits

Commits on Oct 11, 2026

Commits on Oct 12, 2026

Commits on Oct 13, 2026