v1.24.1

Conky v1.24.1

This patch release focuses on stability fixes after v1.24.0, including safer X11 mouse-event propagation, an APCUPSD NIS parser hardening fix, HTTP backend thread-safety fixes, and several corrections to Linux, exec, layout, and network text objects.

Full Changelog: v1.24.0...v1.24.1

Breaking Changes

• None.

Highlights Since v1.24.0

Security

• Hardened APCUPSD NIS response parsing so malformed or tampered length prefixes cannot be passed to recv() as oversized reads. This fixes GHSA-4577-mm6h-jxmx for users of ${apcupsd ...} and related APCUPSD objects.

X11 and Mouse Events

• Fixed cursor event stealing in X11 mouse-event handling, including Openbox and Fluxbox compatibility.
• Avoided capturing root-window input unless lua_mouse_hook needs it, reducing interference with the window manager.
• Restored and tightened root enter/leave handling and event propagation edge cases for XI2 events.
• Fixed solid background painting when an alpha own_window_colour is requested but no ARGB visual is available.
• Fixed BUILD_LUA_CAIRO_XLIB configuration so Lua Cairo Xlib support is exposed correctly.

Runtime and Output Stability

• Serialized HTTP page publication between the draw thread and libmicrohttpd worker threads, preventing heap corruption and hangs during concurrent requests or config reloads.
• Discarded stderr from ${exec} commands so noisy commands do not flood the terminal or system journal.
• Made execbar, execgauge, and execgraph silently return 0.0 while their callback has not produced output yet, matching the plain exec-family behavior.

Linux, Layout, and Text Objects

• Fixed ${top cpu} in one-shot runs by taking a priming CPU sample before the only rendered frame.
• Fixed offline Linux CPU cores reporting stale usage or shifting other cores into the wrong slots.
• Removed a no-op 100 ms sleep from Linux CPU updates.
• Fixed $distribution parsing for unquoted /etc/os-release values and /proc/version fallback quirks.
• Fixed net-stat bar parsing so interface names and bar dimensions work in either order.
• Fixed window sizing for graph/bar/gauge lines that combine tall elements with ${voffset}.

Pull Requests by Category

Bug Fixes

• fix(x11): fix cursor event stealing (#2391)
• fix: harden apcupsd NIS response parsing (#2392)
• fix: various small bugs (#2394)

Misc

• chore: ignore .codex (#2383)
• chore: bump version to v1.24.1 (#2384)
• chore: apply clang-format (#2393)