-
Notifications
You must be signed in to change notification settings - Fork 3
OpenSep 6, 2026
No due date
•Last updated Release-infrastructure follow-ups carried forward. Not shipped in v0.4.1 or v0.4.2.
13% complete
List view
0 of 20 selected 0 issues of 20 selected
- Status: Open.#313 In dean0x/mdscript;
--vars JSON file duplicate keys silently last-win (same class as #200, different mechanism)
cliCLI commands and optionsCLI commands and optionsquestionFurther information is requestedFurther information is requestedStatus: Open.#326 In dean0x/mdscript;spec §4.6 Imports "Rules:" omits symlink rejection — spec/implementation drift on a security control
documentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#327 In dean0x/mdscript;Question: should spec §7.8 document fmt.sort_frontmatter_keys, a deliberately inert config field?
documentationImprovements or additions to documentationImprovements or additions to documentationquestionFurther information is requestedFurther information is requestedStatus: Open.#328 In dean0x/mdscript;Stale rustdoc in lib.rs: "empty in S1 — rules arrive in S2", and "9 lint rules" (there are 10)
documentationImprovements or additions to documentationImprovements or additions to documentationgood first issueGood for newcomersGood for newcomersStatus: Open.#329 In dean0x/mdscript;ci(release): move both musl zig wrappers to cargo-zigbuild's maintained linker-arg filter
github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions codetech-debtTechnical debtTechnical debtStatus: Open.#339 In dean0x/mdscript;ci(release): load-test the linux-x64-musl addon on Alpine before upload
github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions codetech-debtTechnical debtTechnical debtStatus: Open.#340 In dean0x/mdscript;scripts(verify-pr-checks): key the skipped-publish allowance on the release.yml check suite, not the job name
github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions codetech-debtTechnical debtTechnical debtStatus: Open.#341 In dean0x/mdscript;ci(release): validate CARGO_REGISTRY_TOKEN against crates.io in the version-gate probe (security-08 gap)
github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions codetech-debtTechnical debtTechnical debtStatus: Open.#345 In dean0x/mdscript;- Status: Open.#351 In dean0x/mdscript;
- Status: Open.#352 In dean0x/mdscript;
security: frontmatter YAML parse exposed to alias-bomb / deep-nest DoS (uncatchable at FFI)
rustPull requests that update rust codePull requests that update rust codetech-debtTechnical debtTechnical debtStatus: Open.#162 In dean0x/mdscript;build::write_output still uses truncate-then-write (non-atomic) for compiled artifacts
bugSomething isn't workingSomething isn't workingStatus: Open.#227 In dean0x/mdscript;atomic_write_file: rename-based write does not preserve platform ACLs, xattrs, or owner/group
bugSomething isn't workingSomething isn't workingStatus: Open.#226 In dean0x/mdscript;build: empty directory build exits 0 — silent success hazard in CI
bugSomething isn't workingSomething isn't workingcliCLI commands and optionsCLI commands and optionsStatus: Open.#204 In dean0x/mdscript;debug_assert!-only invariants silently degrade in release builds (3 sites) — PF-005architectureArchitectural refactoringArchitectural refactoringrustPull requests that update rust codePull requests that update rust codetech-debtTechnical debtTechnical debtStatus: Open.#220 In dean0x/mdscript;output.rspath helpers fail-open onstrip_prefixedge cases and non-UTF-8 pathscliCLI commands and optionsCLI commands and optionsrustPull requests that update rust codePull requests that update rust codetech-debtTechnical debtTechnical debtStatus: Open.#217 In dean0x/mdscript;Fixed wall-clock waits on filesystem events share the watch-startup defect class
cliCLI commands and optionsCLI commands and optionsjavascriptPull requests that update javascript codePull requests that update javascript coderustPull requests that update rust codePull requests that update rust codetech-debtTechnical debtTechnical debtStatus: Open.#318 In dean0x/mdscript;cli_watch harness: unjoined stderr drain thread and latent stdout deadlock in spawn_watch_ready
cliCLI commands and optionsCLI commands and optionsrustPull requests that update rust codePull requests that update rust codetech-debtTechnical debtTechnical debtStatus: Open.#320 In dean0x/mdscript;- Status: Open.#129 In dean0x/mdscript;