Changelog

Features

• 397c469: feat(doctor): report the store's live pragma state, and release-note the WAL change (@enieuwy)

Fixes

• ad54e9e: fix(attachments): bound upload verification to the authorized extent (@enieuwy)
• f0940b5: fix(attachments): verify the uploaded bytes against the authorized digest (@enieuwy)
• 34d95b2: fix(cliutil): guard truncateRunes against a non-positive cap (@enieuwy)
• 6969c8f: fix(cliutil): redact credentials before truncating the error body (@enieuwy)
• 4e707c5: fix(collections): do not treat a blank export page as the end of the collection (@enieuwy)
• 754b6d2: fix(collections): drop the byte-equality page guard, dedupe BibTeX keys (@enieuwy)
• d1b18ad: fix(collections): enforce the blast-radius and destructive gates, not just --yes (@enieuwy)
• 7b023ce: fix(collections): match the established exit code for a gate refusal (@enieuwy)
• 02e3d54: fix(collections): parse BibTeX before rewriting keys, reject any repeated page (@enieuwy)
• ba4dcbf: fix(collections): require --yes before create, update, or delete writes (@enieuwy)
• a3f7dc1: fix(collections): walk every page when exporting a collection (@enieuwy)
• 7018a2e: fix(deliver): clean up the spool on panic, not just on normal return (@enieuwy)
• 128c25f: fix(deliver): unique spool per run, and stop swallowing a zero-byte failure (@enieuwy)
• a70d25c: fix(mcp): bound slow readers and idle connections on the HTTP transport (@enieuwy)
• 19b2e8e: fix(mcp): close the paths that bypassed the outbound boundary (@enieuwy)
• d62cc47: fix(mcp): frame library content as data, not instructions (@enieuwy)
• d7cb047: fix(reading-list): plan add/start/done locally under --dry-run (@enieuwy)
• acc4832: fix(store): stop the read-only DSN trying to convert the journal mode (@enieuwy)
• 8e820b7: fix(store): use the DSN pragma syntax the pinned driver actually implements (@enieuwy)
• 30cc732: fix(workflow): discard the overflow prefix, and finish the release notes (@enieuwy)
• d666a98: fix(workflow): fail a step that grows past the output ceiling instead of OOMing (@enieuwy)

Documentation

• 95f1a8c: docs(changelog): correct the WAL guidance and add the missing entries (@enieuwy)

Build & CI

• 660fbde: chore(release): prepare v0.14.0 (@enieuwy)
• c21d441: chore(release): re-enable the winget publisher (@enieuwy)

Other

• d12e051: perf(attachments): stop copying the upload payload a second time (@enieuwy)
• cbd0481: perf(attachments): stream the digest and the upload, stop holding the file (@enieuwy)
• ab8e7f7: perf(deliver): stream --deliver output to disk instead of the heap (@enieuwy)
• 1e329ce: perf(mcp): bound mirrored command output at the writer (@enieuwy)

Curated history: CHANGELOG.md · Install: brew install orgmentem/tap/zotio