Conversation
… promoted, umami, branch hygiene)
…landed on master not dev
… CSP host (#955) Addresses gitar findings on the mail app (now on master): - IMAP: validate the client-supplied message UID is a bare numeric UID before passing it to conn.uid(FETCH, ...), closing an IMAP command-injection gap. - SMTP: reject CR/LF/NUL in to/cc/subject before assigning them to MIME headers, preventing header injection (hidden Bcc, spoofed headers). - CSP: _strip_port no longer corrupts a bracketed IPv6 host. Validation errors surface as 400 (MailValidationError) instead of a 502. Adds tests/test_mail_security.py (19 cases).
…ta.2 (#956) Introduces a formal versioning and release system for taOS: - Bump version from 1.0.0-beta (beta.1) to 1.0.0-beta.2 in pyproject.toml, desktop/package.json, and tinyagentos/__init__.py (all kept identical). - Backend: update-check endpoint now returns the real installed version from __version__ instead of the hardcoded "0.1.0". Adds new_version field parsed from the remote branch HEAD via git show, so the UI can display the target version without requiring a full install. - Frontend: UpdatesPanel shows version numbers (e.g. 1.0.0-beta.2) as the primary display; commit SHAs move to a smaller secondary mono line. Fallback "v0.1.0-dev" replaced with info.current_version. - Tests: add TestUpdateCheckVersion asserting current_version equals tinyagentos.__version__; update UpdatesPanel test fixtures to include current_version and add version-display assertions. - CHANGELOG.md: Keep a Changelog format with 1.0.0-beta.2 and 1.0.0-beta.1 entries. - docs/RELEASING.md: step-by-step release process (bump, changelog, PR, promote, tag).
* fix(desktop): stop windows jumping during drag react-rnd's position prop is controlled, so any desktop re-render mid-drag re-applied the stored position and yanked the window back. Snap-zone preview, the live wallpaper, and the agent command stream all re-render the desktop continuously, so the window jumped erratically while dragging. Decouple each window from those re-renders: stabilize the snap-zone onDrag/onDragStop callbacks (refs, identity never changes) and only flip preview state when the zone actually changes; memoize Window and subscribe to process-store actions individually instead of the whole store. A window now only re-renders when its own state changes, so a drag is no longer interrupted. * fix(desktop): persist position during resize so windows do not jump react-rnd's position prop is controlled and a resize from a top or left edge moves the window's x/y as well as its w/h. The handler saved only the new size, so the stale stored position was re-applied and the window jumped sideways (right when resizing horizontally, left when resizing vertically). Feed react-rnd's reported position+size back live via onResize, commit both atomically via a new updateBounds action, and persist the final bounds on resize stop. Resize is now smooth from every edge. * fix(desktop): recover off-screen windows on restore/maximize + Center Window A window dragged or resized off-screen could not be recovered: restoring it from the dock put it back at its off-screen position, and maximizing a minimized window did not un-minimize it. - safeBounds(): recompute the current desktop area and clamp a window to a usable on-screen size, recentering it when its title bar is no longer reachable. - restoreWindow + un-maximize now apply safeBounds, so showing a lost window brings it back into view. - maximizeWindow now un-minimizes when maximizing (so Maximise always shows the window). - New recenterWindow action + a 'Center Window' item in the dock right-click menu as a direct recovery affordance. * fix(desktop): remove steady-state transform so fixed elements position correctly The launch wrapper kept scale-100 (transform: scale(1)) after the entrance animation. Any transform on an ancestor establishes a containing block for position:fixed descendants, so the dock (fixed bottom-3) pinned to the top and context menus rendered in a far corner instead of at the cursor, which made the dock right-click menu look broken. Keep the entrance zoom (scale-95 animates to none) but drop the transform once launched, so the dock, context menus, and modals position against the viewport again. * fix(desktop): portal context menus to body so they open at the cursor The dock container uses -translate-x-1/2 to center itself, and that transform makes a containing block for the position:fixed context menu rendered inside it, so the dock right-click menu opened far from the cursor (off-screen). Render the ContextMenu through a portal to document.body so its fixed coordinates are always viewport-relative, regardless of any transformed ancestor. Updated the keyboard-nav tests to query the portaled menu via screen role queries.
Qodo reviews are paused for this user.Troubleshooting steps vary by plan Learn more → On a Teams plan? Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center? |
|
Warning Review limit reached
More reviews will be available in 4 minutes and 35 seconds. Learn how PR review limits work. Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file). ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (21)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
👋 Thanks for the PR! This one targets See CONTRIBUTING.md for the branch model. |
1 participant
Promotes dev to master for the 1.0.0-beta.2 release.
All merged under the gitar severity gate (Gitar approved; only deferrable suggestions remained).