Skip to content

Omgato 0.1.6

Choose a tag to compare

@data-goblin data-goblin released this 30 Aug 16:19
· 15 commits to main since this release

Omgato 0.1.6 closes the remaining Key Light cache-path issue identified during marketplace review.

Security

  • Opens the mutable lights.toml cache once with O_NOFOLLOW, O_NONBLOCK, and O_CLOEXEC.
  • Validates that same descriptor as a regular file owned by the current user before reading it.
  • Reads only from the validated descriptor through the existing 64 KiB cap, eliminating the path-reopen race and preventing FIFO blocking.

Validation

  • Adds regression coverage for symlinked caches, FIFO caches, foreign ownership, and valid regular cache files.
  • Passes the complete workspace test suite, Clippy with warnings denied, QML linting, and omarchy plugin validate.