aleleba/effectcraft
1
0
Fork 0
mirror of https://github.com/storytold/effectcraft.git synced 2026-10-26 02:57:34 -06:00
Code Issues Packages Projects Releases Wiki Activity
2,247 Commits 90 Branches 17 Tags
9c0597fbfdfdeb5f80f86e281c91aefb831baa19
Commit Graph
2247 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Zaxaerith 9c0597fbfd fix(ui): add Duplicate to project item context menu (#2207) 2026-10-23 22:45:35 +08:00
Dylan M. Taylor 250b34174e Merge pull request #2218 from dylanmtaylor/sonar/checker-stat 
fix: suppress the stat check's taint finding (SonarCloud)
 2026-10-23 10:35:56 -04:00
Dylan M. Taylor 0c8d47f42a fix: suppress the stat check's taint finding (SonarCloud) 
The stat is the validation that rejects anything but an existing regular
file; annotate it with that reasoning.

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>
 2026-10-23 10:28:48 -04:00
Dylan M. Taylor 9b735dc687 Merge pull request #2217 from dylanmtaylor/sonar/checker-path-safety 
fix: document the AE checker's operator-supplied CLI path (SonarCloud)
 2026-10-23 10:18:29 -04:00
Dylan M. Taylor c75071dfb8 fix: document the AE checker's operator-supplied CLI path (SonarCloud) 
The path is the developer's own CLI build, stat'ed as a regular file before
use; suppress the taint finding with that reasoning.

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>
 2026-10-23 10:10:47 -04:00
Dylan M. Taylor 16c30830ef Merge pull request #2215 from dylanmtaylor/sonar/nosonar-placement 
fix: put the NOSONAR marker on the spawnSync line (SonarCloud follow-up)
 2026-10-23 09:53:46 -04:00
Dylan M. Taylor 400fbb79e9 fix: put the NOSONAR marker on the spawnSync line (SonarCloud) 
Sonar applies NOSONAR to the line that carries the marker, so the
explanation above the call did not suppress anything.

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>
 2026-10-23 09:44:38 -04:00
Dylan M. Taylor 9066b64150 Merge pull request #2214 from dylanmtaylor/sonar/security-reliability 
fix: validate the CLI path in the AE ease checker (SonarCloud jssecurity:S8705)
 2026-10-23 09:37:45 -04:00
Dylan M. Taylor d1d9849e2d fix: validate the CLI path in the AE ease checker (SonarCloud) 
Resolve the argument and require a regular file before spawnSync, which
never uses a shell and only runs fixed binaries or that validated path.

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>
 2026-10-23 09:29:39 -04:00
Dylan M. Taylor 23f11ab7cf expr: bound rewrite expansion and preserve assignment targets (#2195) 
* expr: bound rewrite expansion and preserve assignment targets

* expr: bound rewritten output size and rewrite computed assignment targets
 2026-10-23 09:14:49 -04:00
Dylan M. Taylor 09b9ebca34 roto: bound frozen matte decoding and serialization (#2194) 
* roto: bound frozen matte decoding and serialization

* roto: address review (fallible RLE growth, pre-check plane bytes, saturate 32-bit limits)
 2026-10-23 08:59:06 -04:00
Dylan M. Taylor 8a4ed77c4a pdf: bound image sample and mask allocations (#2191) 
* pdf: bound image sample and mask allocations

* pdf: fallible mask allocations and JPEG header pixel cap
 2026-10-23 08:56:15 -04:00
Dylan M. Taylor ca8043cbba text: bound layout and variable font metadata (#2193) 
* text: bound layout and variable font metadata

* text: address review (intern once, f64 prefix sums, bounded item search, name fallback, consistent variation fallback)
 2026-10-23 08:55:07 -04:00
Dylan M. Taylor 4b48482e8f ui: bound queued synthetic input gestures (#2197) 
* ui: bound queued synthetic input gestures

* ui: reserve exact click event count
 2026-10-23 08:45:10 -04:00
Dylan M. Taylor 2cf90507f3 svg: bound raster surfaces and handle duplicate gradient stops (#2190) 2026-10-23 08:38:10 -04:00
Brandon ThomasandClaude Opus 5.5 9581b53c3f Release 0.16.0 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
v0.16.0 		2026-10-22 20:06:09 -04:00
Dylan M. Taylor 0871135a6b Merge pull request #2062 from storytold/sonar-fix/js-css-reliability 
fix: JS reliability bugs (SonarCloud S1764/S9383/S4275)
 2026-10-22 19:27:57 -04:00
Dylan M. Taylor 645b683a77 Merge pull request #2061 from storytold/sonar-fix/js-csprng 
security: use crypto.randomUUID for temp file suffix (SonarCloud S2245)
 2026-10-22 19:27:53 -04:00
Dylan M. Taylor ec0cc83a29 fix(web): fall back to network when caches.open fails in service worker 2026-10-22 19:19:20 -04:00
Dylan M. Taylor 6871aa2236 security: check crypto.randomUUID availability in canMove 2026-10-22 19:19:19 -04:00
Brandon ThomasandClaude Opus 5.5 15b8a916c5 Release 0.15.0 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
v0.15.0 		2026-10-22 15:39:32 -04:00
skylar taylor-barrick b55cb5bc15 Merge pull request #1363 from DWAA1660/fix/1237-comp-contains-cycles 
Project: comp_contains walks precomps with a visited set, not recursion (#1237)
 2026-10-22 07:52:56 -06:00
skylar taylor-barrick 571aebd854 Merge pull request #1957 from Anubhav-Rai/script-value-dims 
script: setValue rejects an array of the wrong dimension (#1936)
 2026-10-22 07:52:51 -06:00
skylar taylor-barrick 831e719fa2 Merge pull request #1855 from CharlesBaumer/fix/doc-path-stills-windows 
Windows: two fixes so cargo xtask ci gets past clippy and the media tests
 2026-10-22 07:52:46 -06:00
skylar taylor-barrick 70763d74c0 Merge pull request #1966 from Silvertree2010/fix/h930-deleting-the-first-vertex-of-a-c 
Fix feather points when deleting first vertex of a closed mask path
 2026-10-22 07:52:39 -06:00
skylar taylor-barrick be4d2d7bb8 Merge pull request #1992 from Silvertree2010/fix/h1142-sampleimage-panics-with-integer 
Fix integer overflow in sampleImage for huge sample points
 2026-10-22 07:52:31 -06:00
skylar taylor-barrick a9c2bfa6eb Merge pull request #1902 from Silvertree2010/fix/h704-hsv-to-rgb-returns-magenta-for-a 
Fix hsv_to_rgb returning magenta for tiny negative hues
 2026-10-22 07:52:17 -06:00
skylar taylor-barrick 1348621007 Merge pull request #1989 from Silvertree2010/fix/h1084-path-rect-panics-when-both-size 
Fix panic in path::rect when both size components are NaN
 2026-10-22 07:52:11 -06:00
BFlat 9a51a05e1b Merge pull request #2099 from storytold/readme/app-icon 
README: the app icon above the title
 2026-10-22 18:01:35 +07:00
bflatastic 7d68a74ffc README: the app icon above the title 2026-10-22 17:57:40 +07:00
Dylan M. Taylor f37f20ffd0 Merge pull request #2059 from storytold/sonar-fix/enforce-https 
security: enforce HTTPS on curl downloads (SonarCloud S6506)
 2026-10-21 20:13:41 -04:00
Dylan M. Taylor 7983396692 fix: JS reliability bugs (SonarCloud S1764, S9383, S4275) 
- scriptui.js: replace the self-comparison NaN check (o.max === o.max) with
  the explicit Number.isNaN(o.max) (S1764).
- sw.js: mark the fire-and-forget cache.put() with void and a .catch() so the
  promise rejection is handled (S9383).
- prelude.js: return __err(...) from the activeCamera getter so every path
  yields a value (S4275); __err always throws, so behavior is unchanged.
 2026-10-21 17:20:35 -04:00
Dylan M. Taylor 887fe3a3a8 security: use crypto.randomUUID for temp file suffix (SonarCloud S2245) 
Replace Math.random() with crypto.randomUUID() when generating the unique
suffix for the atomic write-then-move temp file. The value isn't security-
sensitive, but a CSPRNG gives a stronger uniqueness guarantee and resolves
SonarCloud javascript:S2245.
 2026-10-21 17:14:27 -04:00
Dylan M. Taylor 5003351186 security: enforce HTTPS on curl downloads (SonarCloud S6506) 
Add --proto '=https' to curl invocations so redirects cannot downgrade to
plaintext HTTP. Resolves SonarCloud S6506 (shell/docker/githubactions).
 2026-10-21 17:06:49 -04:00
Dylan M. Taylor cee4c16c8a ci: add sonar-project.properties for CI-based analysis 
Marks the project ineligible for SonarCloud Automatic Analysis, resolving the
CI-vs-automatic-analysis conflict so the SonarCloud workflow succeeds.
 2026-10-21 16:00:34 -04:00
Dylan M. Taylor 714b6c29b0 ci: add SonarCloud scan via shared reusable workflow 
Calls storytold/craft-common-actions/.github/workflows/sonarcloud.yml@main
with secrets: inherit. Adds SonarCloud badge to README where missing and
removes the redundant sonar-project.properties (config now passed by the
reusable workflow).
 2026-10-21 15:46:55 -04:00
Brandon ThomasandClaude Opus 5.5 26b40199b7 Release 0.14.0 
FreeBSD aarch64: build with 16 codegen units and no LTO in the emulated release VM, which ran past
the job's 5-hour limit with the single-unit thin-LTO profile.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
v0.14.0 		2026-10-21 14:04:43 -04:00
Dylan M. Taylor ec2d51a17a ci: add SonarCloud scan workflow and config 2026-10-21 13:55:18 -04:00
NetterSilverandClaude Haiku 5.5 28f97be7ee Fix integer overflow in sampleImage for huge sample points 
Found while testing crates/expr/src/sample.rs:102

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-21 02:39:20 +02:00
NetterSilverandClaude Haiku 5.5 798b8a98e6 Fix panic in path::rect when both size components are NaN 
Found while testing crates/path/src/lib.rs:136

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-20 23:31:13 +02:00
NetterSilverandClaude Haiku 5.5 b3ff5d4aa6 Fix feather points when deleting first vertex of a closed mask path 
Found while testing crates/keyframe/src/value.rs:79-95 (ShapePath::feather_after_remove, called from crates/engine/src/commands/mask.rs:330)

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-20 18:51:57 +02:00
Brandon ThomasandClaude Opus 5.5 9db7f3b217 Skip CodeRabbit reviews on Dependabot PRs (#1962) 
Adds .coderabbit.yaml so CodeRabbit no longer reviews or comments on PRs opened by dependabot[bot].

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-20 11:39:09 -04:00
Dylan M. Taylor 4fdbc07ea5 Merge pull request #1773 from dylanmtaylor/chore/drop-competitor-references 
docs: drop references to competing commercial software
 2026-10-20 11:34:59 -04:00
Dylan M. Taylor 12feed5fb3 Merge pull request #1803 from dylanmtaylor/docs/add-sonar-coderabbit-badges 
docs: add SonarCloud and CodeRabbit badges to README
 2026-10-20 11:32:35 -04:00
Anubhav-RaiandClaude Opus 5 a67ca11d1c script: setValue rejects an array of the wrong dimension (#1936) 
A 2-D point property took any array: `[1, 2, 3]` and `[1, 2, 3, 4]` were cut to `[1, 2]` and
`[1]` was broadcast to `[1, 1]`, each reported as success, so a script holding a wrong value
silently did something else instead of failing. After Effects raises "Array is not of the
correct dimension" and leaves the property unchanged.

The length must now match the property's dimension, with the one exception After Effects also
makes: two values for a 3-D property, where z stays 0, so `position.setValue([x, y])` keeps
working.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-10-20 20:23:41 +05:30
Brandon ThomasandClaude Opus 5.5 de3fec28ed Release 0.13.0 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
v0.13.0 		2026-10-19 22:18:54 -04:00
NetterSilverandClaude Haiku 5.5 eca2c32793 Fix hsv_to_rgb returning magenta for tiny negative hues 
Found while testing crates/color/src/lib.rs:143-158

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-19 20:31:18 +02:00
Dylan M. Taylor 75fce6b2d8 docs: put SonarCloud and CodeRabbit badges on their own line 2026-10-18 14:47:37 -04:00
Dylan M. Taylor ef74d82902 ci: configure Dependabot for Cargo and GitHub Actions 
Co-authored-by: Dylan M. Taylor <dylan@dylanmtaylor.com>
 2026-10-18 12:31:27 -06:00
Dylan M. Taylor 20c03451c0 docs: describe color grading panel, scope SDK plug-in warning, qualify rendering tests, and link parity checklist 2026-10-18 12:51:59 -04:00