skylar taylor-barrick 8abb1d1c71 #1807: test that a zstd block larger than its frame's window is refused ...

ruzstd 0.9.0 let a block decompress to more than its frame's window allows (RUSTSEC-2026-0344). The test swaps a hand-built Zstandard frame with a 1 KiB window and one 100,000-byte RLE block into an Affinity container entry and checks that reading the entry fails. With ruzstd pinned back to 0.9.0 the block is decompressed and the read succeeds.

2026-10-23 03:33:30 +07:00

..

affinity

#1807: test that a zstd block larger than its frame's window is refused

2026-10-23 03:33:30 +07:00

brush

Brushes: New Brush and Bristle Brush Options take a bristle brush name of at most 31 characters

2026-10-21 23:38:01 +07:00

cad

Export: EPS, legacy .ai, EMF/WMF and DXF give one note for images that can't be decoded

2026-10-22 06:13:32 +07:00

color

Gradients: the Perceptual test describes the method in our own words

2026-10-23 01:53:30 +07:00

doc

Effects: stacked geometry effects keep to an anchor and line budget (#3578)

2026-10-23 02:44:52 +07:00

effects

Effects: stacked geometry effects keep to an anchor and line budget (#3578)

2026-10-23 02:44:52 +07:00

engine

Paint: a fill or stroke given to a compound path's member paints the compound path (#3692)

2026-10-23 03:22:54 +07:00

eps

Import: type on a closed path keeps its wrapped end bracket

2026-10-23 01:53:47 +07:00

format

Type: ruby (ふりがな) for live text

2026-10-22 00:10:56 +07:00

geom

G11: Arc segment dialog options wired to shape.arc

2026-10-22 13:38:04 +07:00

mcp

Automation: --automation-read-root and --automation-write-root may each be given more than once (#3546)

2026-10-22 21:36:15 +07:00

metafile

Export: EPS, legacy .ai, EMF/WMF and DXF give one note for images that can't be decoded

2026-10-22 06:13:32 +07:00

pathops

Shape Builder: in merge mode, a click on a stroke splits the path there

2026-10-23 01:53:34 +07:00

pdf

Gradients: a Perceptual gradient mixes its colours in OKLab, and SVG and PDF write it as an image

2026-10-23 01:53:29 +07:00

plugins

Plug-ins: doc comments for the functions the filter changes touch

2026-10-22 01:25:51 +07:00

render

Fix #2788: a dashed stroke with object opacity folds the opacity into its colour instead of compositing a canvas-wide layer

2026-10-23 03:22:55 +07:00

scriptcheck

…

svg

Merge pull request #3688 from addibble/perf/svg-import-css-data-urls

2026-10-23 02:18:29 +07:00

testkit

Text: an embedder of the egui panels may leave the bundled fonts out

2026-10-21 23:32:26 +07:00

text

Type: colour emoji fonts with bitmap glyphs draw and export

2026-10-23 00:44:31 +07:00

three-d

3D and Materials: Extrude & Bevel and Inflate build a solid from each stroke's outline

2026-10-19 21:51:26 +07:00

tools

Snapping: tangent and perpendicular snapping, View > Snapping (#2530)

2026-10-23 03:22:54 +07:00

trace

Image Trace: Auto Color keeps rare but distinct colours

2026-10-17 19:38:43 +07:00

ui-egui

#3533: test that a popover stays open through its anchor click and a panel drag

2026-10-23 03:33:30 +07:00