Releases: TheColliery/CoalLedger
Release list
v0.1.0-beta.4 - CodeQL HIGH fix
CodeQL HIGH fix: js/incomplete-multi-character-sanitization on the HTML-comment strip now strips to a FIXED POINT (repeat until stable) - the canonical fix for an overlapping-marker bypass. bad-tag-filter (the parser is a CommonMark block-classifier, not a security sanitizer - HTML is passthrough-flagged, never sanitized), the dead-code notes, and Scorecard posture are dismissed-with-reason.
v0.1.0-beta.3 - fix HIGH parser DoS
Second CoalBoard dogfood pass (full mirror, nasa rigor) caught a HIGH the first pass missed.
[HIGH] the markdown parser was quadratic-time. md-ast parseInlineDest re-scanned the tail to end-of-string on every unclosed inline-link bracket, so a crafted doc of "[a](" fragments parsed in O(N^2) — measured 8 KB ~190 ms up to 32 KB ~2.9 s, extrapolated ~1 MB ~1 hr, while a benign 273 KB doc parsed in 5 ms. Root fix: the inline destination/title scans are length-bounded, and checkDocument refuses a doc over 512 KB (flagging doc-too-large) which also closes the transitive linked-file vector. Now near-linear, bounded ~5.7 s at the cap, never a hang. +2 timing regression tests. Confirmed by reproducing both the quadratic and the linear fix.
v0.1.0-beta.2 - anchor precision fix
Launch-day CoalBoard dogfood fix: [MED] anchor-missing could pass a genuinely-broken #link because the raw-HTML id/name scan created false anchors (data-id, ids in comments). Tightened to real attribute boundaries + comment stripping. Full detail: CHANGELOG.md
v0.1.0-beta.1 - initial public beta
Initial public beta of the 7th Colliery sibling: a docs-health canary suite - CoalMine for documentation. 6+1 canaries (wrong, incomplete, stale, contradictory, broken, unreadable, + config-gated leaked) over a vendored zero-dependency CommonMark+GFM AST engine - things that render fine are never flagged. Severity judged by context; CONFIRMED vs SUSPECTED split; fixes behind a choice-gated menu, never auto-applied; correctness escalates to CoalBoard. 88 hermetic tests; adversarially reviewed pre-launch. Install: claude plugin marketplace add TheColliery/CoalLedger then claude plugin install coalledger@coalledger