v1.0.4
[1.0.4] - 2026-08-19
Production audit: host env isolation, destructive-path warnings, installer
release lookup, CodeQL, and PyInstaller spec cleanup.
- Inherited host
BATTEST_*variables are stripped before the script runs, so
a runner or CI job cannot leak helper names into the case. Fixtureenvcan
still setBATTEST_*values. - Destructive-internal absolute-path warnings match quoted paths with spaces
(del "C:\Program Files\x.txt") and switches with a colon
(del /a:h C:\Windows\Temp\x.txt). - Fixture YAML larger than 1 MiB is a schema error at load time.
- CodeQL Rust analysis fetches the locked
stub/crate graph before init so
rust-analyzer can expand macros. Actions stay on version tags, not commit
SHAs. - The standalone installer queries GitHub
releases/latestinstead of paging
100 releases. - PyInstaller spec no longer passes removed WinSxS/
cipherAnalysis arguments.