6 Commits

Include renames

Author	SHA1	Message	Date
aiongg	7865923aec	Merge upstream main into print-color	2026-10-23 05:21:53 +00:00
Dylan M. Taylor	7a6d60a285	security: enforce HTTPS redirects and atomic write in fetch-pdf-test-fonts.py	2026-10-22 19:28:55 -04:00
Dylan M. Taylor	e25b6ec6e6	security: validate CLI paths/args in dev tools (SonarCloud S2083/S8707/S8705/S7044) ... Resolve and validate command-line path arguments before use, enforce HTTPS at download sinks, and confirm path containment. Hardens local codegen/fetch tools against path-traversal and command-argument-injection findings.	2026-10-21 17:12:54 -04:00
aiongg	f7ae814d91	plate-test: app-neutral print color scenes, checked by PDF structure and Ghostscript plates ... craft-plate-test writes JSON scenes through craft-pdf and checks the written PDF's structure (CI, under a second) and, locally only, its separated plates through Ghostscript tiffsep (scripts/plate-check.sh). Apps can run the same scenes through their own export as a dev-dependency.	2026-10-20 03:41:13 +00:00
skylar taylor-barrick	89dcbb3060	test(pdf): pin extraction policy and retry fixtures (PDFR)	2026-10-13 13:24:54 -06:00
skylar taylor-barrick	c07b3fada6	feat(pdf): share patched reading and rasterization	2026-10-13 12:52:32 -06:00