v5.3.4
Ultimate Bug Scanner v5.3.4
Fixes
- #60: Rust module scans no longer hang unboundedly — each language module now runs under a per-module
timeoutwith process-group teardown (cargo/ast-grep grandchildren are reaped), and aMODULE_TIMEOUTdiagnostic is emitted instead of wedging. Fixes the case where acargosub-invocation blocked on a lockedtarget/. - Catches up the versioned release train after v5.3.3 failed its tag-vs-VERSION gate.
Integrity — minisign key rotated
The release signing key was rotated (the prior key's secret half was only ever in CI). Verify signed checksums with the new public key:
export UBS_MINISIGN_PUBKEY="RWS+jJ7psytzl3v4znpraY9VWBQrICXBFmT3VwvxpTzbuV2Q/CBTDmVJ"
SHA256SUMS.minisig is signed with key id 97732BB3E99E8CBE. The installer fetches the ubs script from main.