Skip to content

🎬 Local Video Tools v0.1.2 — Early Preview

Pre-release
Pre-release

Choose a tag to compare

View all tags
@sahansera sahansera released this 07 Sep 03:04
· 4 commits to main since this release
v0.1.2
949e48e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Public-preview hardening release

This Early Preview release hardens Local Video Tools ahead of its public repository launch and includes a stable cross-platform regression suite.

Security and reliability

  • Canonicalize input paths so symlinks cannot bypass the default LM Studio working-directory boundary.
  • Reject symlinked path segments in attachment staging, output and background-job directories.
  • Strictly validate restored job records and UUIDs before using them to build persistence paths.
  • Serialize atomic job-record writes so stale progress updates cannot replace final job state.
  • Refuse to overwrite existing output files, including output symlinks.

Developer experience

  • Report processed and total duration in background-job status results.
  • Ignore LM Studio development output, staged media, generated videos and job records.
  • Use reproducible CI installs, lockfile-based caching and read-only workflow permissions.
  • Add grouped minor/patch Dependabot updates while leaving major upgrades for explicit review.
  • Document Node.js 22 as the minimum development runtime.
  • Stabilize the persisted-job regression test across local and GitHub Actions environments.

Validation

  • Clean npm ci installation
  • TypeScript typecheck and build
  • 10 passing tests, including path-boundary and persisted-job regression coverage
  • 20 consecutive local regression runs
  • Green GitHub Actions run on Node.js 22
  • npm audit with zero known vulnerabilities
Assets 2
Loading