Release 0.4.11-a - #413

Merged

ZhuchkaTriplesix merged 25 commits into

mainfrom

Jul 27, 2026

Commits on Jul 27, 2026

fix(theme): default remote install to kDebugMode for localhost policy
ZhuchkaTriplesix
committed
fix(security): use p.isWithin for archive extraction bounds
ZhuchkaTriplesix
committed
fix(marketplace): require SHA256 checksum before HttpMarketplace install
ZhuchkaTriplesix
committed
Merge pull request #403 from QueryaHub/issue/399-theme-localhost-default
ZhuchkaTriplesix
authored
Merge pull request #404 from QueryaHub/issue/401-archive-is-within
ZhuchkaTriplesix
authored
Merge pull request #405 from QueryaHub/issue/396-marketplace-sha256
ZhuchkaTriplesix
authored
fix(marketplace): restrict extension download URLs (HTTPS allowlist)
ZhuchkaTriplesix
committed
Merge pull request #406 from QueryaHub/issue/397-marketplace-download-urls
ZhuchkaTriplesix
authored
fix(security): add SafeZipExtractor limits for archive installs
ZhuchkaTriplesix
committed
fix(theme): require SHA256 checksum for remote theme install
ZhuchkaTriplesix
committed
chore(test): remove unnecessary null assertions in safe zip tests
ZhuchkaTriplesix
committed
Merge pull request #407 from QueryaHub/issue/398-safe-zip-extractor
ZhuchkaTriplesix
authored
Merge branch 'dev' into issue/400-theme-remote-sha256
ZhuchkaTriplesix
authored
Merge pull request #408 from QueryaHub/issue/400-theme-remote-sha256
ZhuchkaTriplesix
authored
fix(sandbox): require consent before unsandboxed driver launch
ZhuchkaTriplesix
committed
chore: remove accidental local analysis file from branch
ZhuchkaTriplesix
committed
test(sandbox): pass allowUnsandboxedLaunch in plugin RPC bridge tests
ZhuchkaTriplesix
committed
style(sandbox): use rethrow when consent is denied
ZhuchkaTriplesix
committed
Merge pull request #409 from QueryaHub/issue/395-sandbox-os-consent
ZhuchkaTriplesix
authored
fix(marketplace): add sideload security notice and optional SHA256 field
ZhuchkaTriplesix
committed
Merge pull request #410 from QueryaHub/issue/402-sideload-sha256-ux
ZhuchkaTriplesix
authored
packaging(linux): add rpm, Flatpak, and AUR (#386)
ZhuchkaTriplesix
committed
Merge pull request #411 from QueryaHub/issue/386-linux-rpm-flatpak-aur
ZhuchkaTriplesix
authored
chore(release): prepare pre-release 0.4.11-a
ZhuchkaTriplesix
committed
Merge pull request #412 from QueryaHub/chore/release-0.4.11-a
ZhuchkaTriplesix
authored