v1.41.1.0 fix wave: 7 HIGH bugs from external audit + regression tests (PR #1169 follow-up)#1592

Merged

garrytan merged 13 commits into

mainfrom

fix/audit-critical-high-bugs

May 20, 2026

Commits on May 18, 2026

fix(build-app): escape sed replacement metachars in Chromium rebrand

RagavRida
authored and
garrytan
committed
fix(build-app): bail out if 'mktemp -d' fails instead of cp-ing into '/'

RagavRida
authored and
garrytan
committed
fix(telemetry-sync): drop predictable $$ tmp-file fallback

RagavRida
authored and
garrytan
committed
fix(verify-rls): drop predictable $$-based tmp file fallback

RagavRida
authored and
garrytan
committed
fix(security-classifier): close writer + delete tmp on download error

RagavRida
authored and
garrytan
committed
fix(meta-commands): guard JSON.parse in pdf --from-file parser

RagavRida
authored and
garrytan
committed
fix(global-discover): stop dropping sessions when header >8KB

RagavRida
authored and
garrytan
committed
test: export downloadFile, parsePdfFromFile, extractCwdFromJsonl

garrytan
and
claude
committed
fix(security-classifier): await writer close before unlinking tmp on error

garrytan
and
claude
committed
test(browse): regression tests for downloadFile cleanup + parsePdfFromFile guard

garrytan
and
claude
committed
test(global-discover): regression for extractCwdFromJsonl 64KB cap

garrytan
and
claude
committed
test: regression tests for shell-script bugs in PR #1169 (#2-#5)

garrytan
and
claude
committed
chore: bump version and changelog (v1.41.1.0)

garrytan
and
claude
committed