Repository navigation
Integrate controller/mobile authoring readiness and secure native sources - #662
Conversation
…y with 5 updates Bumps the actions-minor-and-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-and-patch - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [motion](https://github.com/motiondivision/motion) from 13.5.1 to 14.0.0. - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v13.5.1...v14.0.0) --- updated-dependencies: - dependency-name: motion dependency-version: 14.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…ted local automation [skip ci]
DRSDavidSoft
changed the title
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
Security review follow-up: the launcher now reads existing ownership metadata through a bounded read-only descriptor and creates missing metadata exclusively. A competing creator fails closed, and invalid ownership cannot seed config. Four Windows preservation/seed checks pass; the Linux no-follow symlink regression runs in CI. CodeQL alert 105 was reviewed as a narrow false positive: its flagged second open uses wx+ (O_CREAT|O_EXCL), while the query identifies consecutive opens without examining exclusive flags. That specific finding was triaged; no rule, branch protection or required check was disabled. The previous actual unsafe ownership path is not reinstated. Cafe remains connected and paused; high visible CPU and physical/audio acceptance are explicitly still open in paired Pealayer trackers #62/#80. |
|
Integration is now merged under normal branch protections. Required build, repository health and all-language CodeQL checks passed; Android preview also passed after the SDK-download retry. Every outstanding PR head (#648, #649, #654, #655, #657, #658, #659, #660, #661, #662) is verified as an ancestor of main 84b4cda and all ten are marked MERGED. Neither repository has an open PR. Cafe installed source 62998fc has identical source content to merged main. Its product updater acknowledged operation op-fedc14ff23b37cdb and executable SHA-256 65c4a7ef4d53f5bf5c42d4fa46393f132af62bc599cab0ed522727b082145664 with terminal_verified=true. Both native hosts remain in interactive session 4; Pealayer is paused, connected, Cafe authority, seven effects, and matched ready/prepare/clock revision 49 without errors. No firmware or physical outputs were exercised. High visible CPU and physical/audio/soak acceptance remain open, not hidden by this merge/deployment receipt. |
Interactive controller web hosts now show the full existing TUI, including --no-open --no-tray. Only explicit --no-tui, redirected streams and embedded service hosts suppress the TUI. Those paths use the existing pure-Go sole-owned Windows console-hide calls; shared/user terminals remain protected.
Uses the primary IPC/event facade, not a second UART coordinator. Immediate startup splash, terminal console settings and shutdown without a blank visible host are retained.
Stacked on the frozen mobile #661 source and preserves #660 WS changes. Narrow Go vet passes. Tests/CI were skipped by user instruction; package/live delivery remain separate.