diff options
| author | CismonX <[email protected]> | 2025-03-25 14:01:06 +0800 |
|---|---|---|
| committer | CismonX <[email protected]> | 2025-03-25 14:14:56 +0800 |
| commit | 54732fc1b692a907fde048e02ff3a67ca4a420ea (patch) | |
| tree | 934297e85bf46f298316f0dfaf4899b385caf1d2 | |
| parent | 917598d7b54d726eac53e970f655fc72fb441f37 (diff) | |
| download | vscode-texinfo-primary.tar.gz | |
By default, yazl since version 3.3.0 uses the Info-ZIP "universal time"
extended field to encode file mtime.
This should generally not be a problem, however, open-vsx considers
extra fields in a ZIP entry as "potentially malicious", and prevents
such extensions from being published.
See:
- https://github.com/EclipseFdn/open-vsx.org/issues/2062
- https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/213
- https://github.com/eclipsesource/openvsx/blob/286a976503a2b33ceb367ecc1d62a6b3fc169cdb/server/src/main/java/org/eclipse/openvsx/ExtensionProcessor.java#L572
- https://github.com/thejoshwolfe/yazl/commit/0435008994dd3895a0f02266656b59d54aaacfe2
| -rw-r--r-- | .build.yml | 2 | ||||
| -rw-r--r-- | package-lock.json | 4 | ||||
| -rw-r--r-- | package.json | 2 | ||||
| -rw-r--r-- | scripts/make-vsix.js | 1 |
4 files changed, 5 insertions, 4 deletions
@@ -16,7 +16,7 @@ packages: sources: - https://git.sr.ht/~cismonx/vscode-texinfo artifacts: - - vscode-texinfo/texinfo-0.4.0.vsix + - vscode-texinfo/texinfo-0.4.1.vsix tasks: - build: | cd vscode-texinfo diff --git a/package-lock.json b/package-lock.json index 2b1283f..923bab4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6,13 +6,13 @@ "This file is offered as-is, without any warranty." ], "name": "texinfo", - "version": "0.4.0", + "version": "0.4.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "texinfo", - "version": "0.4.0", + "version": "0.4.1", "license": "GPL-3.0-or-later", "devDependencies": { "@types/node": "^22.13.11", diff --git a/package.json b/package.json index 156db18..d0dc8f0 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,7 @@ "displayName": "Texinfo Language Support", "description": "Texinfo language support for Visual Studio Code", "publisher": "cismonx", - "version": "0.4.0", + "version": "0.4.1", "author": "CismonX <[email protected]>", "license": "GPL-3.0-or-later", "homepage": "https://savannah.nongnu.org/p/vscode-texinfo", diff --git a/scripts/make-vsix.js b/scripts/make-vsix.js index 359ed44..5eb8426 100644 --- a/scripts/make-vsix.js +++ b/scripts/make-vsix.js @@ -24,6 +24,7 @@ async function addPathToZipFile(zipFile, path) { zipFile.addFile(name, zippedPath, { mtime: mtime, compressionLevel: 9, + forceDosTimestamp: true, }); } } |