Dylan M. Taylor 8931277070 security(io): charge sparse layers, shape caches and shared decodes (#8955) ...

* security(io): charge sparse layers, shape caches and shared decodes

ORA and PSD export refuse dense boxes past a cap; PSD import and ABR mapping decode shared masks/tips once; Affinity and SVG shape caches are charged to the import budget; SVG embedded JPEG size is probed; Krita tiles are charged for the backing tiles they land in.

* fix(io): clippy range pattern; align the sparse Krita test tiles to the backing grid

* io: address review - offset-aware KRA tile budget, saturating stroke reach, OpenRaster entry limit, PSD retained-surface budget, halved PSD gather cap

2026-10-23 21:52:25 -04:00

..

affinity

security(affinity): charge shared-object expansion against document-wide budgets (#8938)

2026-10-23 14:30:21 -04:00

algo

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:51:37 +02:00

automation

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:51:37 +02:00

cms

fix(cms): reject malformed hex data in .look LUTs (#8657)

2026-10-23 17:40:16 -04:00

codecs

fix(codecs): WebP export keeps the resolution (#8775)

2026-10-23 17:41:02 -04:00

color

Soft Light: dark backdrops follow Photoshop's W3C curve (#8804) (#8817)

2026-10-23 17:39:40 -04:00

compose

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:23:15 +02:00

doc

Merge main into integration-batch-7

2026-10-23 20:37:05 +00:00

engine

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:51:37 +02:00

format

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:51:37 +02:00

geom

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:23:15 +02:00

gpu

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:23:15 +02:00

heif

Keep tests correct and docs current with one test binary per crate

2026-10-22 16:55:34 +00:00

io

security(io): charge sparse layers, shape caches and shared decodes (#8955)

2026-10-23 21:52:25 -04:00

ipp

fix(ipp): preserve printer group metadata (#8828)

2026-10-23 17:55:05 -04:00

ops

…

paint

perf: skip redundant smart object resamples and per-pixel reads (#6406)

2026-10-23 18:36:54 -04:00

plugins

security(plugins): reject host routing keys, bound bands and start fuel, open without blocking on FIFOs

2026-10-23 14:41:52 -04:00

psd

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:23:15 +02:00

raster

perf: skip redundant smart object resamples and per-pixel reads (#6406)

2026-10-23 18:36:54 -04:00

raw

Merge main into integration-batch-7

2026-10-23 20:37:05 +00:00

tablet

…

testkit

Tests: report a bad PHOTOCRAFT_SWEEP_PART with assert!, which testkit's lints allow

2026-10-23 16:49:11 +00:00

text

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:23:15 +02:00

ui-egui

Merge remote-tracking branch 'origin/main' into integration-batch-7

2026-10-24 00:51:37 +02:00

vector

security: bisect flat-table and gradient-stop lookups; charge ICC curve samples; bound PSD planes, RAW ljpeg retention and TIFF dump preview

2026-10-23 14:41:53 -04:00