SivanCola 382016dfe1 fix(ci): avoid backtracking in concurrency inventory names ...

Problem: CodeQL reports exponential backtracking in the shared Windows
inventory test-name parser.
Root cause: repeated suffix groups can partition the same slash sequence.
Fix: accept the entire optional non-whitespace suffix once, preserving the
previous accepted language. Cover nested names and a long malformed suffix.
Verification: two Node tests pass; the original regex fails the bounded
regression while the existing contract test passes. Go and inventory bytes
are unchanged; prior exact-head Go qualification remains separate.

2026-10-28 14:18:44 +08:00

..

official-theme-art

docs: the references and code the deletion commit left behind

2026-09-16 21:50:24 -07:00

testdata

ci(release): studio writes the CLI update pointer the installed updaters read

2026-09-30 07:16:14 -07:00

backfill-issue-labels.mjs

Remove bundled MCP servers and add code index fallback

2026-06-16 17:44:27 +08:00

backfill-studio-notes.sh

feat(release): publish each version's notes to the mirror before the catalog names them

2026-10-08 03:00:31 -07:00

brew-cask-guard.mjs

ci(release): the Homebrew cask is written only after the CLI release it points at exists, and never moves backwards

2026-10-04 04:32:09 -07:00

brew-cask-guard.test.mjs

ci(release): the Homebrew cask is written only after the CLI release it points at exists, and never moves backwards

2026-10-04 04:32:09 -07:00

cache-guard.sh

refactor: the kernel's packages live in the layer they belong to

2026-09-23 18:28:21 -07:00

check-cli-archives.py

feat(release): the CLI archives carry the web page

2026-10-16 03:39:02 -07:00

ci-platform-scope.sh

test(ci): qualify background resource owners on native Windows

2026-10-25 21:36:48 +08:00

ci-platform-scope.test.mjs

test(ci): qualify background resource owners on native Windows

2026-10-25 21:36:48 +08:00

cli-archive-build.test.mjs

feat(release): the CLI archives carry the web page

2026-10-16 03:39:02 -07:00

cli-archive-contents.test.mjs

feat(release): the CLI archives carry the web page

2026-10-16 03:39:02 -07:00

compare-cli-release-manifests.sh

fix(release): preserve legacy manifests and exact notes

2026-07-31 08:18:49 +08:00

compare-cli-release-tags.sh

fix(release): complete and harden Stable/Preview channels / 补全并加固正式版与预览版渠道 (#6997)

2026-07-29 15:09:26 +08:00

compare-desktop-release-manifests.sh

fix(release): preserve legacy manifests and exact notes

2026-07-31 08:18:49 +08:00

compare-desktop-release-versions.sh

fix(release): complete and harden Stable/Preview channels / 补全并加固正式版与预览版渠道 (#6997)

2026-07-29 15:09:26 +08:00

credential-leak-check.mjs

refactor: the kernel's packages live in the layer they belong to

2026-09-23 18:28:21 -07:00

credit-identities.json

fix(docs): keep the owner, aliases and tool identities out of the acknowledgments table

2026-10-04 20:47:45 -07:00

decide-cli-pointer-update.sh

fix(release): complete and harden Stable/Preview channels / 补全并加固正式版与预览版渠道 (#6997)

2026-07-29 15:09:26 +08:00

decide-cli-release-publication.sh

ci(release): studio writes the CLI update pointer the installed updaters read

2026-09-30 07:16:14 -07:00

decide-desktop-pointer-update.sh

fix(release): complete and harden Stable/Preview channels / 补全并加固正式版与预览版渠道 (#6997)

2026-07-29 15:09:26 +08:00

dsh-market-index.mjs

feat(integrations): DeepSeek Harness plugin market index for the Reasonix bundle

2026-10-18 02:30:29 -07:00

feedback-sync.fixture.json

feat(feedback): mirror reporter replies to their issue, publish only released items and images

2026-09-30 10:52:34 -07:00

feedback-sync.mjs

fix(feedback-sync): evaluate every open row, not only the first 200

2026-10-26 10:35:48 -07:00

feedback-sync.test.mjs

fix(feedback-sync): evaluate every open row, not only the first 200

2026-10-26 10:35:48 -07:00

finalize-npm-official-release.mjs

fix(release): tolerate forbidden npm staging cleanup (#7477)

2026-08-04 21:18:50 +08:00

finalize-npm-official-release.test.mjs

fix(release): tolerate forbidden npm staging cleanup (#7477)

2026-08-04 21:18:50 +08:00

install-nsis.ps1

ci: use curl for pinned NSIS archive

2026-07-16 01:43:52 +08:00

install-smoke.ps1

ci(release): ship a native Windows ARM64 Studio

2026-10-07 02:02:09 -07:00

linux-install-smoke.sh

test(studio): strengthen Linux package and release verification

2026-10-13 19:18:07 +08:00

linux-install-smoke.test.mjs

test(studio): strengthen Linux package and release verification

2026-10-13 19:18:07 +08:00

markdown-refs.mjs

ci(release-studio): credit pull request authors and issue fixers in published notes

2026-09-26 23:28:25 -07:00

markdown-refs.test.mjs

test(release): read the fragment directory's notes too and skip directories

2026-10-13 09:56:38 -07:00

package-cli-archive.sh

feat(release): the CLI archives carry the web page

2026-10-16 03:39:02 -07:00

publish-cli-pointer.sh

ci(release): studio writes the CLI update pointer the installed updaters read

2026-09-30 07:16:14 -07:00

publish-cli-pointer.test.mjs

ci(release): studio writes the CLI update pointer the installed updaters read

2026-09-30 07:16:14 -07:00

publish-desktop-github-release.sh

fix(release): complete and harden Stable/Preview channels / 补全并加固正式版与预览版渠道 (#6997)

2026-07-29 15:09:26 +08:00

publish-studio-changelog.sh

fix(release): publish and verify the Studio website changelog

2026-10-19 23:07:01 +08:00

published-job-evidence.mjs

test(proc): recognize the Windows recorder by executable path

2026-10-27 11:25:55 +08:00

reasonix-session-diag.bat

chore(scripts): a support script that collects what a duplicate-session report needs

2026-08-18 01:37:55 -07:00

release-credits.mjs

fix(docs): keep the owner, aliases and tool identities out of the acknowledgments table

2026-10-04 20:47:45 -07:00

release-credits.test.mjs

fix(release): never credit the repository owner in release notes

2026-10-03 17:12:08 -07:00

release-verify-issues.mjs

feat(ci): ask reporters to verify on the release that carries their fix

2026-07-29 22:23:57 -07:00

release-verify-issues.test.mjs

feat(ci): ask reporters to verify on the release that carries their fix

2026-07-29 22:23:57 -07:00

render-brew-cask.sh

feat(release): npm and Homebrew follow the Studio line

2026-09-24 22:20:04 -07:00

resolve-cli-release.sh

fix(release): bind stable tags to reviewed candidate

2026-08-03 01:05:09 +08:00

resolve-desktop-candidate.sh

fix(release): authorize preview desktop orchestration

2026-08-01 09:49:00 +08:00

resolve-desktop-release.sh

fix(release): bind stable tags to reviewed candidate

2026-08-03 01:05:09 +08:00

resolve-npm-release.sh

fix(release): enforce unified Preview publication

2026-07-31 23:53:55 +08:00

resolve-preview-release.sh

Add explicit Preview release recovery

2026-08-01 11:47:55 +08:00

resolve-stable-release.sh

fix(release): bind stable tags to reviewed candidate

2026-08-03 01:05:09 +08:00

sign-certum.ps1

ci(release-studio): sign and verify every PE file in the Windows tree

2026-09-27 09:09:45 -07:00

stale-report-sweep.mjs

fix(ci): take the sweep's age from the whole report, not the version field

2026-07-29 23:22:15 -07:00

stale-report-sweep.test.mjs

fix(ci): take the sweep's age from the whole report, not the version field

2026-07-29 23:22:15 -07:00

studio-artifacts.test.mjs

test(release): the artifact check requires the AppImage for both architectures

2026-10-18 04:40:24 -07:00

studio-notes-publish.test.mjs

fix(release): publish and verify the Studio website changelog

2026-10-19 23:07:01 +08:00

studio-release-flags.sh

release(studio): stable releases become GitHub latest, without a root latest.json

2026-10-04 20:25:37 -07:00

studio-release-flags.test.mjs

release(studio): stable releases become GitHub latest, without a root latest.json

2026-10-04 20:25:37 -07:00

studio-release-notes.mjs

feat(studio): switch a release's notes between Chinese and English

2026-10-14 02:28:39 -07:00

studio-release-notes.test.mjs

feat(studio): switch a release's notes between Chinese and English

2026-10-14 02:28:39 -07:00

test-webview2-native-smoke.ps1

fix(desktop): externalize WebView2 release smoke (#8333)

2026-08-11 15:43:36 +08:00

update-acknowledgments.mjs

fix(docs): keep the owner, aliases and tool identities out of the acknowledgments table

2026-10-04 20:47:45 -07:00

update-acknowledgments.test.mjs

fix(docs): keep the owner, aliases and tool identities out of the acknowledgments table

2026-10-04 20:47:45 -07:00

update-contributors.mjs

feat(studio): add the community group, Discord and contributors to the app

2026-10-02 03:23:14 -07:00

update-contributors.test.mjs

feat(studio): add the community group, Discord and contributors to the app

2026-10-02 03:23:14 -07:00

update-star-history.mjs

fix(docs): self-host the Star History chart (#6755)

2026-07-21 14:39:40 +08:00

update-star-history.test.mjs

fix(docs): self-host the Star History chart (#6755)

2026-07-21 14:39:40 +08:00

update-versions-index.sh

feat(update): withdraw a published Studio version from the catalog

2026-10-11 20:57:15 -07:00

validate-cli-release-manifest.sh

ci(release): studio writes the CLI update pointer the installed updaters read

2026-09-30 07:16:14 -07:00

validate-desktop-release-manifest.sh

Accept immutable paths in legacy Preview validation

2026-08-01 12:44:00 +08:00

verify-desktop-release-directory.sh

Harden authenticated Desktop release recovery

2026-08-01 18:07:17 +08:00

verify-desktop-release-manifest-assets.sh

Harden authenticated Desktop release recovery

2026-08-01 18:07:17 +08:00

verify-embedded-docs.sh

refactor: the kernel's packages live in the layer they belong to

2026-09-23 18:28:21 -07:00

verify-linux-appimage.sh

fix(release): name the AppImage explicitly and make the verifier say what it wanted

2026-10-18 03:31:48 -07:00

verify-linux-package.sh

test(studio): strengthen Linux package and release verification

2026-10-13 19:18:07 +08:00

verify-release-authorization.sh

feat(release): separate Stable and Preview histories

2026-07-31 01:12:23 +08:00

verify-release-push-ci.sh

fix(release): bind stable tags to reviewed candidate

2026-08-03 01:05:09 +08:00

verify-release-tag.sh

fix(release): prevent skipped stable publishers (#6629)

2026-07-18 08:36:22 +08:00

verify-stable-release-artifacts.sh

fix(release): prevent skipped stable publishers (#6629)

2026-07-18 08:36:22 +08:00

verify-studio-artifacts.sh

feat(release): build and verify an AppImage of Studio on Linux (download only)

2026-10-18 03:25:38 -07:00

verify-windows-authenticode.ps1

ci(release): ship a native Windows ARM64 Studio

2026-10-07 02:02:09 -07:00

verify-windows-package.ps1

ci(release): ship a native Windows ARM64 Studio

2026-10-07 02:02:09 -07:00

version-ab.sh

feat(scripts): compare two versions on the suite without comparing two setups

2026-08-18 17:17:21 -07:00

windows-concurrency-tests.mjs

fix(ci): avoid backtracking in concurrency inventory names

2026-10-28 14:18:44 +08:00

windows-concurrency-tests.test.mjs

fix(ci): avoid backtracking in concurrency inventory names

2026-10-28 14:18:44 +08:00

windows-signing-lib.ps1

feat(studio): replace native computer helper with CUA Driver

2026-10-13 08:43:14 -07:00

withdraw-version.sh

feat(update): withdraw a published Studio version from the catalog

2026-10-11 20:57:15 -07:00

withdraw-version.test.mjs

feat(update): withdraw a published Studio version from the catalog

2026-10-11 20:57:15 -07:00