Skip to content

v0.1.7

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Oct 21:01
· 39 commits to main since this release
v0.1.7
5e3aa36
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Audit fixes: robustness

A code audit of v0.1.5 produced a register of findings (audit-v0.1.5.md). v0.1.6 covered crashes and performance; this release covers robustness (P3-29). Staged leftovers (supply chain, remaining media items, and other recorded findings) stay for later releases.

Robustness (P3-29)

  • Config save is atomic and symlink-safe: Options writes rename into place, follow a symlinked config to its target, copy permissions, and sync_all before replace. Inline TOML tables remain a known limit.
  • Discovery survives bad directories and huge trees: an unreadable directory is skipped with a diagnostic instead of aborting the walk; page files are capped by size, and listing stops at 50,000 pages (which pages survive above that cap follows filesystem walk order).
  • YAML frontmatter amplification is bounded: frontmatter size and alias-marker starts are capped so a hostile document cannot blow up parse time or memory.
  • Copied text matches what you see: control characters and bidi formatting controls are sanitised in rendered spans, code copy, and the table viewer.
  • Large bitmaps stay within a 2× pixel-byte budget: the image viewer keeps one RGBA natural buffer (into_rgba8) and rejects zooms that would exceed the budget.

This is an alpha prerelease, like every v0.1.* release. Phase 2 remains on its fixes-only dogfood hold until the adoption verdict around 2026-10-13. The Phase 3 exit decision still waits on dogfooding the installed build; this release does not restart that clock.

Install and upgrade

Download the matching platform tarball and its .sha256, verify the checksum, and replace the binary in the same install location. See Releasing and upgrading. The lite build is still cargo install --locked --no-default-features --git https://github.com/luckgrid/wiki-reader --tag v0.1.7 wiki-reader.

  • Binaries are unsigned and not notarized.
  • Browser downloads on macOS may be quarantined. If Gatekeeper blocks the extracted binary, run xattr -d com.apple.quarantine path/to/wiki-reader.
  • The Linux binary links the glibc from the ubuntu-latest build runner; older distributions may need a source build or cargo install.
  • Upgrades preserve configuration and saved sessions.
Assets 8
Loading