Repository navigation
Penny Goblin 0.2.13 includes security and memory safety hardening across the ledger, statement runtime, sync protocol, and compiled views, plus category casing search fixes.
• Add image magic header and bounds validation before decoding receipts and vouchers.
• Enforce strict JSON document limits on budget, settings, and statement sync payloads.
• Protect sensitive ledger and exported statements with atomic, permission-restricted file publishing.
• Enforce recursion depth limits (<= 64) and template safety checks across compiled Oriel views.
• Reuse search arenas to avoid allocation churn in high-volume payment lists.
• Resolve category casing collisions when searching or renaming categories in web and Oriel.
• Tested and verified on physical POCO Android hardware (surya_global) and desktop Linux.
This release provides locally built Linux x86_64 AppImages (Oriel and WebKit) and the Android arm64 APK. Domain, compiled-view, WebKit and sync tests were run locally.
Added later: the Windows x86_64 installer (WebView2, Vulkan) and the macOS Apple silicon disk image (WebKit, Metal), built by CI from the same 0.2.13 app sources (run 39609535259). Windows needs Windows 10/11 with the WebView2 runtime; macOS needs macOS 13 or newer.
Source: highercomve/penny-goblin, tag v0.2.13, commit 89424ba.