docs: drop the upgrade ceiling headline from both READMEs

The paragraph below it already states what is pinned, why 12.2 / 0.8.0
are refused, and what the trade-off is; the one-line lead was redundant
and read as a judgement rather than a fact. No other change.
This commit is contained in:
czcdr committed 2026-10-24 00:38:18 +08:00
1 parent 508f3c24d6
commit 3d46fbcf02
2 files changed
+5 -5

No files matched your search

+4 -4
View File
@@ -10,10 +10,10 @@
> kept on the [`v1` branch](https://github.com/czcdr/dsh-plugin-rea/tree/v1) and on npm as `[email protected]`.
> Full comparison: [Two lines: 1.x and 2.x](#two-lines-1x-and-2x) · upgrading: [Upgrading from 1.x](#upgrading-from-1x).
> **How new can it get? This is the ceiling — going further breaks tools.** REA 6.7.0 accepts Ghidra
> **12.1.x** only (12.2 is `unsupported`, and the whole Ghidra decompile/analysis group disappears) and the
> jadx bridge **0.7.1** only (0.8.0 fails on its first call with `Expected engine 0.7.1`, before any APK is
> loaded). JDK **21.0.13** is out upstream, but Adoptium ships no Windows build, so there is nothing to point
> REA 6.7.0 accepts Ghidra **12.1.x** only (12.2 is `unsupported`, and the whole Ghidra decompile/analysis
> group disappears) and the jadx bridge **0.7.1** only (0.8.0 fails on its first call with `Expected engine
> 0.7.1`, before any APK is loaded). JDK **21.0.13** is out upstream, but Adoptium ships no Windows build, so
> there is nothing to point
> at here — and it drops only three of the four eMudhra anchors. The trade-off is therefore "all tools green,
> CVE still open": Ghidra 12.1.4's CVE-2026-100504 / 100505 / 100503 / 113604 stay in the chain — **do not
> analyse untrusted samples with this environment** — and the JDK still trusts the eMudhra anchors. Evidence,
+1 -1
View File
@@ -10,7 +10,7 @@
> [`v1` 分支](https://github.com/czcdr/dsh-plugin-rea/tree/v1),npm 上仍是 `[email protected]`。
> 完整对比:[两条线:1.x 与 2.x](#两条线1x-与-2x) · 升级:[从 1.x 升级](#从-1x-升级)。
> **能升到多新?就到这儿 —— 再往上会掉工具。** REA 6.7.0 只认 Ghidra **12.1.x**(12.2 判 `unsupported`,
> REA 6.7.0 只认 Ghidra **12.1.x**(12.2 判 `unsupported`,
> Ghidra 系的反编译/分析工具整组消失)和 jadx 桥接 **0.7.1**(0.8.0 会在第一次调用就报
> `Expected engine 0.7.1`,失败点在加载 APK 之前)。JDK **21.0.13** 上游已发,但 Adoptium 没给 Windows
> 构建,本机无处可指,而且它只移除 4 个 eMudhra 锚里的 3 个。所以现在的取舍是「工具全绿、CVE 未清」: