You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+2Lines changed: 2 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -47,6 +47,8 @@ Quick reference of what was modified in recent versions:
47
47
### Fixed
48
48
49
49
-**VS Code: `:template` false-positive warning for sibling keys.** The diagnostic `"Key referenced in template is not defined"` only checked root-level `keyMap` (dot-paths), so `{sibling}` inside a nested `:template` always flagged as missing. Now checks both root path and sibling scope (`parent.sibling`).
50
+
-**Python binding CI smoke tests.**`pyo3`'s `extension-module` mode is now feature-gated so binding builds keep extension semantics by default, while `cargo test` in CI can run with `--no-default-features` and avoid unresolved embedded-Python entrypoints.
51
+
-**Bindings workflow stability.**`bindings-smoke.yml` now runs the Python smoke job with `--no-default-features`, prints/verifies the built Node native artifact on Windows, and executes the Node smoke test from the binding directory directly instead of going through `npm run`.
50
52
-**JS: Prototype pollution via `Synx.set()` / `Synx.add()` / `Synx.remove()`** (Security). Path segments `__proto__`, `constructor`, `prototype` are now rejected with an error.
51
53
-**JS: `deepGet()` followed prototype chain** (Security). Lookups like `constructor` or `toString` could reach inherited properties. Now uses `hasOwnProperty` checks at every traversal step.
52
54
-**JS: `__proto__` key injection in parser** (Security). A `.synx` file with a key named `__proto__` could corrupt the parsed object's prototype. Such keys are now silently skipped.
0 commit comments