fix(core): prevent symlink path traversal in htmlBundler safePath (F-005)#1214

Open

vanceingalls wants to merge 35 commits into

graphite-base/1214from

06-04-fix_core_prevent_symlink_path_traversal_in_htmlbundler_safepath_f-005_

Commits on Jun 3, 2026

docs(readme): add Frame.md design template gallery (#1182)
vanceingalls
authored

Commits on Jun 4, 2026

feat(docs): add weekly update drafts (#1183)
jrusso1020
authored
fix: delay ObjectURL revocation and silence TS5 baseUrl deprecations (#1181)

miguel-heygen
and
Jefsky
authored
fix(cli): suppress EPIPE crashes in piped agent environments (#1184)
miguel-heygen
authored
fix(cli): lazy-load @puppeteer/browsers to prevent debug package crash (#1185)
miguel-heygen
authored
fix(engine): fast-fail on zero duration instead of 45s timeout (#1186)
miguel-heygen
authored
chore: release v0.6.71
miguel-heygen
committed
fix(cli): support arm64 hosts for `--docker` render (#1196)
jrusso1020
authored
fix(producer): localize remote <img> sources + await image readiness (#1197)

jrusso1020
and
claude
authored
chore: release v0.6.72
jrusso1020
committed
fix(scripts): make release change-guard robust to git status prefix (#1198)
jrusso1020
authored
fix(cli): reject directory --composition and add --browser-timeout (#1199) (#1200)

jrusso1020
and
claude
authored
test(cli): cover the cloud client 401-refresh-retry decorator (#1202)
calcarazgre646
authored
fix(cli): report available memory instead of free memory in doctor (#1204)
miguel-heygen
authored
fix(runtime): don't restart non-loop media that has naturally ended (#1203)
miguel-heygen
authored
chore: release v0.6.73
miguel-heygen
committed

Commits on Jun 5, 2026

Commits on Jun 6, 2026