iris/gridcraft
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: sync upstream (9 Commits) #6

Merged
alf merged 9 commits from chore/sync-upstream-20261023 into main 2026-10-23 11:05:30 +00:00
Conversation 0 Commits 9 Files changed 11 +341 -33
alf commented 2026-10-23 11:05:30 +00:00
Owner
Copy link

Upstream-Sync von upstream/main (9 Commits). Fast-Forward.

  • ac8da7d4 Release 0.11.1
  • 10fb7d56 macOS packaging: retry stapler when Apple's CloudKit drops the connection
  • 73af8c6a Release 0.11.0
  • d1db71d0 Merge pull request #2209 from Higgs32584/fix/2178-script-trust-gate
  • b5b39693 scripts: trust gate review fixes (#2178)
  • 6dedb931 Merge remote-tracking branch 'origin/main' into fix/2178-script-trust-gate
  • a1c84547 Merge pull request #2249 from storytold/readme/app-icon
  • 7ed49469 README: the app icon above the title
  • 5392d95b scripts: require workbook trust before running embedded scripts (#2178)
Upstream-Sync von `upstream/main` (9 Commits). Fast-Forward. - ac8da7d4 Release 0.11.1 - 10fb7d56 macOS packaging: retry stapler when Apple's CloudKit drops the connection - 73af8c6a Release 0.11.0 - d1db71d0 Merge pull request #2209 from Higgs32584/fix/2178-script-trust-gate - b5b39693 scripts: trust gate review fixes (#2178) - 6dedb931 Merge remote-tracking branch 'origin/main' into fix/2178-script-trust-gate - a1c84547 Merge pull request #2249 from storytold/readme/app-icon - 7ed49469 README: the app icon above the title - 5392d95b scripts: require workbook trust before running embedded scripts (#2178)
A workbook opened with GridCraft scripts (`_sc_scripts`) starts untrusted:
automate.runScript refuses them until the user trusts the workbook for the
session (Macros dialog > Trust Scripts, i.e. automate.trustScripts) or the
caller passes `trusted: true` for that one run. Workbooks without scripts,
and scripts written in the session, are unaffected.

Whatever the trust, a script whose steps reach outside the workbook
(file.*, link.*, or any `path` param: Get Data, From Text/CSV, Insert
Picture) is refused before any step runs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
README: the app icon above the title
- automate.trustScripts: only a missing `trusted` defaults to true; a
  non-boolean value is an error and leaves the workbook untrusted.
- The refusal message points at Trust Scripts in View > Macros (Alt+F8)
  and at automate.trustScripts.
- Catalog row for automate.trustScripts; parity checklist regenerated.
- Script steps run inside an io::ScriptSandbox (thread-local) so
  read_file/write_file refuse whatever the parameter is called, and a
  step that raises OpenUrl is dropped and stops the script. The id/param
  deny list stays as the up-front refusal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
scripts: require workbook trust before running embedded scripts (#2178)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
stapler staple/validate fetch the notarization ticket from CloudKit, which
sometimes fails with "The network connection was lost" (Error 68). That
failed this release's macOS job twice in a row. Both steps are idempotent,
so retry up to 5 times with backoff, like hdiutil_retry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Release 0.11.1
Some checks failed
nix.yml / Release 0.11.1 (pull_request) Failing after 0s
Details
packaging-lint.yml / Release 0.11.1 (pull_request) Failing after 0s
Details
sonarcloud.yml / Release 0.11.1 (pull_request) Failing after 0s
Details
nix.yml / Release 0.11.1 (push) Failing after 0s
Details
packaging-lint.yml / Release 0.11.1 (push) Failing after 0s
Details
sonarcloud.yml / Release 0.11.1 (push) Failing after 0s
Details
CI / cargo xtask ci (push) Has been cancelled
Details
CI / cargo xtask ci (pull_request) Has been cancelled
Details
ac8da7d49c 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
alf merged commit ac8da7d49c into main 2026-10-23 11:05:30 +00:00
alf deleted branch chore/sync-upstream-20261023 2026-10-23 11:05:30 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
  
herkunft/alpha-feedback
Aus Rückmeldungen der Alpha-Tester

  
status
blockiert
 Wartet auf etwas anderes

  
status
zu-testen
 Gebaut, aber noch nicht im echten Einsatz geprüft

  
typ
bug
 Fehler

  
typ
docs
 Dokumentation

  
typ
enhancement
 Verbesserung einer vorhandenen Funktion

  
typ
feature
 Neue Funktion

  
typ
idea
 Idee, noch nicht entschieden

No labels
herkunft/alpha-feedback
status
blockiert
status
zu-testen
typ
bug
typ
docs
typ
enhancement
typ
feature
typ
idea
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
iris/gridcraft!6
No description provided.