Dylan M. Taylor 68d5118a9d security: validate CLI paths/args in dev tools (SonarCloud S2083/S8707/S8705/S7044) ...

Resolve and validate command-line path arguments before use, enforce HTTPS at
download sinks, and confirm path containment. Hardens local codegen/fetch tools
against path-traversal and command-argument-injection findings.

2026-10-21 17:13:05 -04:00

..

brand

Licensing: MIT OR Apache-2.0 files, NOTICE, ArtCraft brand terms

2026-10-04 10:05:02 -04:00

images

docs: README (MCP, CLI, export, status, contributing), AGENTS.md (asset enforcement, crash recovery, testing/perf), screenshots re-captured with Inter

2026-09-30 23:52:34 -04:00

raw

Merge PR #1327

2026-10-15 00:44:42 -04:00

showcase

security: validate CLI paths/args in dev tools (SonarCloud S2083/S8707/S8705/S7044)

2026-10-21 17:13:05 -04:00

user

docs: re-verify against 0.7.1

2026-10-13 14:34:54 +02:00

ai-masks.md

Merge PR #2067: LR-MASK-OBJECTS: SAM 3 falls back to the CPU when the GPU can't run it (#1974)

2026-10-21 14:49:23 +00:00

apple-photos.md

docs: #1046 document the cancelled flags and that the UI decides on error kinds

2026-10-11 16:26:04 -05:00

architecture.md

docs: #1037 visible skips and the ci report

2026-10-11 16:33:54 -05:00

arw6-compression.md

Perf: ARW6 decode another 20-34 % faster, same samples

2026-10-13 10:00:33 +02:00

background-tasks.md

LR-BEHAV-BG-TASKS: an older Reload can't overwrite a newer one; background Reload auto-writes sidecars

2026-10-18 19:07:40 +02:00

camera-preview-colour.md

X-Trans CMOS 4 bodies take the X-T3's spectral matrices

2026-10-18 11:46:07 +02:00

contributors.md

About: contributor and model credits compiled in (grab bag + table, self-submitted names) (#252)

2026-10-07 21:22:08 -04:00

control-protocol.md

Merge PR #1487

2026-10-15 01:42:11 -04:00

cr3.md

LR-IMP-FORMATS: CRX high-frequency band width from the tile geometry (#899)

2026-10-15 20:12:46 +02:00

denoise.md

#1880: allow 102 MP AI denoise inputs

2026-10-15 16:31:06 +05:30

display-profiles.md

LR-PREF-DISPLAY: on Linux, previews use the display profile from colord

2026-10-12 04:42:12 +11:00

faces.md

Merge PR #1663

2026-10-15 03:24:51 -04:00

file-format-parity.md

Merge PR #1540

2026-10-14 22:32:33 -04:00

focus-points.md

LR-VIEW-FOCUSPOINT: read focus points for photos already in the library, header-only in the background (#1480)

2026-10-13 16:06:06 +02:00

fuji-lens-corrections.md

LR-EDIT-OPTICS-PROFILE: apply embedded Fujifilm RAF distortion and vignetting tables

2026-10-10 08:38:41 -04:00

gaps.md

Merge PR #842: Read large Lightroom catalogs by page

2026-10-21 14:53:52 +00:00

gpu-pipeline.md

LR-MASK-OBJECTS: SAM 3 falls back to the CPU when the GPU can't run it (#1974)

2026-10-16 23:55:32 +02:00

hardware-parity.md

Merge upstream/main into pr/pen-pressure

2026-10-14 07:58:20 +11:00

lens-profiles.md

LR-EDIT-OPTICS-PROFILE: Apply Nikon's in-file distortion correction for the Z 6II, Z 8 and Z f

2026-10-13 11:10:46 -05:00

library-shortcuts.md

Merge PR #1555

2026-10-14 22:33:11 -04:00

lightroom-catalog-import.md

Merge PR #842: Read large Lightroom catalogs by page

2026-10-21 14:53:52 +00:00

localization-cs.md

i18n(cs): review fixes and updated counts in localization-cs.md

2026-10-18 19:05:43 +02:00

localization-de.md

M16: add German localization using the existing catalogs

2026-10-08 07:27:32 +02:00

localization-es.md

Fix #371: Spanish interface

2026-10-08 20:20:17 +00:00

localization-ja.md

LRC-LIB-SMARTCOLL: localization-ja example uses the new field labels

2026-10-09 10:54:56 -04:00

localization-ka.md

Release: keep the web build without craft-fonts for now (its WASM would pass Cloudflare's 25 MiB limit); docs say so

2026-10-20 12:56:17 +04:00

localization-parity.md

i18n(it): native-speaker corrections and every interface string translated

2026-10-20 16:08:27 +02:00

localization-pt-br.md

i18n: add Brazilian Portuguese (pt-br) UI translation

2026-10-07 17:03:20 -03:00

localization-ru.md

i18n: German and Russian follow-ups (#265, #264)

2026-10-08 18:26:56 +00:00

localization-zh-hans.md

Issue #793: the last two mentions of target/web point at target/web-site (from #888)

2026-10-11 11:40:34 +00:00

localization-zh-hant.md

fix #425: Restore Simplified Chinese font rendering

2026-10-09 15:12:33 +08:00

localization.md

Merge PR #1823 (rebased)

2026-10-15 02:39:01 -04:00

mcp.md

MCP: advertise file overwrite tools as destructive (#2139)

2026-10-17 08:13:57 -05:00

merge.md

Merge PR #1614

2026-10-15 01:42:11 -04:00

nikon-lens-corrections.md

LR-EDIT-OPTICS-PROFILE: Apply Nikon's in-file distortion correction for the Z 6II, Z 8 and Z f

2026-10-13 11:10:46 -05:00

parity-checklist.md

Merge track r1-rawcat into next

2026-10-21 14:58:55 +00:00

process-versions.md

Merge PR #645

2026-10-11 12:03:53 +00:00

raf-compression.md

M11.4: harden RAF validation and camera profile fallback

2026-10-08 11:23:55 +02:00

raf-corpus.sha256

M11.4: harden RAF validation and camera profile fallback

2026-10-08 11:23:55 +02:00

raw-parity.md

Merge main into lightroom-jxl-dng

2026-10-19 08:33:20 +02:00

raw-preview-reads.md

Merge PR #1443

2026-10-14 01:29:30 -04:00

releasing.md

CI: the packaging scripts check out the craft-fonts revision release.yml pins (3d9ab3a, with Noto Sans Thai)

2026-10-15 02:57:33 -04:00

roadmap.md

Merge PR #1823

2026-10-15 01:48:43 -04:00

slideshow.md

LRC-SS-EXPORT: slideshow export to PDF, JPEG sequence and AV1 video

2026-10-11 10:35:09 +02:00

sony-ilce7rm6-lens-corrections.md

LR-EDIT-OPTICS-PROFILE: Sony lateral CA planes off by default (the demosaic already hides most of it)

2026-10-13 13:19:44 +02:00

sony-lens-corrections.md

Merge PR #1176

2026-10-14 23:54:06 -04:00

target-app-parity.md

Merge PR #1027 (rebased)

2026-10-15 03:40:37 -04:00

tint-direction.md

Issue #188: Tint sign documented as landed (DNG / Lightroom sign)

2026-10-08 17:29:47 +00:00

ui-parity.md

Merge PR #1027 (rebased)

2026-10-15 03:40:37 -04:00

vertical-watermarks.md

LR-EXP-WATERMARK: separate horizontal and vertical watermark insets (#827)

2026-10-10 16:11:03 -07:00

web.md

Merge PR #1988: #1507: web start-up treats only NotFoundError as a missing file

2026-10-21 14:56:12 +00:00

whats-new.md

Merge track r1-rawcat into next

2026-10-21 14:58:55 +00:00

xmp-interop.md

Merge PR #1924: Do not read a sibling's shared stem sidecar on import (#1905)

2026-10-21 14:54:19 +00:00