From 32e8fd0b298e9efabfdcff4c3319691ce43ba6c5 Mon Sep 17 00:00:00 2001 From: "Dylan M. Taylor" Date: Wed, 28 Oct 2026 13:20:45 -0400 Subject: [PATCH] Grant network access so update checks can reach GitHub (#1471) --- packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml | 6 +++--- packaging/linux/flatpak/ai.storyteller.figcraft.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml b/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml index 4b0bd0fe..579a5d64 100644 --- a/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml +++ b/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml @@ -30,9 +30,9 @@ finish-args: # line, Open Recent, "Save" next to the original) work in the usual places. - --filesystem=xdg-pictures - --filesystem=xdg-documents - # Deliberately not granted: network (the optional --control server listens on 127.0.0.1 in - # the sandbox; `flatpak override --user --share=network ai.storyteller.figcraft` exposes it to - # host agents) and home/host filesystem access. + # Network: update checks reach GitHub. The optional --control server still listens on + # 127.0.0.1 in the sandbox. Home/host filesystem access is not granted. + - --share=network modules: - name: figcraft buildsystem: simple diff --git a/packaging/linux/flatpak/ai.storyteller.figcraft.yml b/packaging/linux/flatpak/ai.storyteller.figcraft.yml index 542f1ab7..461176c9 100644 --- a/packaging/linux/flatpak/ai.storyteller.figcraft.yml +++ b/packaging/linux/flatpak/ai.storyteller.figcraft.yml @@ -35,9 +35,9 @@ finish-args: # line, Open Recent, "Save" next to the original) work in the usual places. - --filesystem=xdg-pictures - --filesystem=xdg-documents - # Deliberately not granted: network (the optional --control server listens on 127.0.0.1 in - # the sandbox; `flatpak override --user --share=network ai.storyteller.figcraft` exposes it to - # host agents) and home/host filesystem access. + # Network: update checks reach GitHub. The optional --control server still listens on + # 127.0.0.1 in the sandbox. Home/host filesystem access is not granted. + - --share=network build-options: append-path: /usr/lib/sdk/rust-stable/bin modules: