chore: sync upstream (8 Commits) #3

Merged
alf merged 8 commits from chore/sync-upstream-20261021 into main 2026-10-21 11:13:42 +00:00
Owner

Upstream-Sync von upstream/main (8 Commits). Fast-Forward.

  • 41649514 Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow
  • d7481cca Merge remote-tracking branch 'origin/main' into pr-2753
  • d695bc56 fix(redact): evaluate OCMD visibility during sanitization (#3522)
  • 22bedbf2 Skip CodeRabbit reviews on Dependabot PRs (#3692)
  • b77d5700 Release 0.10.1: rebuild with the shared workflow's exact Linux tarball pick
  • 59a5a837 docs: add SonarCloud and CodeRabbit badges to README (#3271)
  • 6fb6b7cf Release 0.10.0
  • cfb71d85 ci: switch to shared nix workflow from craft-common-actions
Upstream-Sync von `upstream/main` (8 Commits). Fast-Forward. - 41649514 Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow - d7481cca Merge remote-tracking branch 'origin/main' into pr-2753 - d695bc56 fix(redact): evaluate OCMD visibility during sanitization (#3522) - 22bedbf2 Skip CodeRabbit reviews on Dependabot PRs (#3692) - b77d5700 Release 0.10.1: rebuild with the shared workflow's exact Linux tarball pick - 59a5a837 docs: add SonarCloud and CodeRabbit badges to README (#3271) - 6fb6b7cf Release 0.10.0 - cfb71d85 ci: switch to shared nix workflow from craft-common-actions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: add SonarCloud and CodeRabbit badges and standardize to flat-square

* docs: put SonarCloud and CodeRabbit badges on their own line
0.10.0's Arch Linux and Flatpak aarch64 jobs picked up the
pdfcraft-cli tarball (storytold/craft-common-actions#35).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Adds .coderabbit.yaml so CodeRabbit no longer reviews or comments on PRs opened by dependabot[bot].

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix(redact): evaluate OCMD visibility during sanitization

Fixes #3499 by evaluating OCMD policies and bounded visibility expressions against the default optional-content configuration before removing hidden groups. Unknown or malformed visibility data is handled conservatively.

* fix(redact): preserve OCMD visibility during sanitization

* fix(redact): count hidden XObjects during verification

* test(redact): cover hidden form depth limit
# Conflicts:
#	.github/workflows/nix.yml
Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow
Some checks failed
freebsd.yml / Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow (pull_request) Failing after 0s
nix.yml / Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow (pull_request) Failing after 0s
packaging-lint.yml / Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow (pull_request) Failing after 0s
freebsd.yml / Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow (push) Failing after 0s
nix.yml / Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow (push) Failing after 0s
packaging-lint.yml / Merge pull request #2753 from dylanmtaylor/ci/shared-nix-workflow (push) Failing after 0s
CI / test (ubuntu-latest) (push) Has been cancelled
CI / test (windows-latest) (push) Has been cancelled
CI / wasm32 check (push) Has been cancelled
CI / dependency licences and advisories (push) Has been cancelled
CI / fuzz (mutation, 15 min) (push) Has been cancelled
CI / test (ubuntu-latest) (pull_request) Has been cancelled
CI / test (windows-latest) (pull_request) Has been cancelled
CI / wasm32 check (pull_request) Has been cancelled
CI / dependency licences and advisories (pull_request) Has been cancelled
CI / fuzz (mutation, 15 min) (pull_request) Has been cancelled
4164951453
ci: switch to shared nix workflow from craft-common-actions
alf merged commit 4164951453 into main 2026-10-21 11:13:42 +00:00
alf deleted branch chore/sync-upstream-20261021 2026-10-21 11:13:42 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
iris/pdfcraft!3
No description provided.