From ef653ebff32d5250c7be146065e4653cef8593bd Mon Sep 17 00:00:00 2001 From: Mykhailo Chalyi Date: Wed, 8 Apr 2026 01:34:28 +0000 Subject: [PATCH 1/2] chore(release): prepare v0.1.17 --- CHANGELOG.md | 36 ++++++++++++++++++++++++++++++++++++ Cargo.toml | 2 +- 2 files changed, 37 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 760636aa..f21c7fb4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,42 @@ ## [Unreleased] +## [0.1.17] - 2026-04-08 + +### Highlights + +- **Expanded fuzz testing** — 10 new fuzz targets (tomlq, archive, csv, grep, template, yaml, sed, envsubst, base64, printf) for stronger security coverage +- **Redirect fixes** — Correct fd3 redirection routing and stderr suppression from builtins +- **Bug fixes** — VFS path resolution with `./` prefix, `date -r` flag, `tar -C`, `command -v` PATH search, and shopt preservation across `exec()` + +### What's Changed + +* feat(fuzz): add tomlq_fuzz target ([#1151](https://github.com/everruns/bashkit/pull/1151)) by @chaliy +* feat(fuzz): add archive_fuzz target ([#1150](https://github.com/everruns/bashkit/pull/1150)) by @chaliy +* feat(fuzz): add csv_fuzz target ([#1149](https://github.com/everruns/bashkit/pull/1149)) by @chaliy +* feat(fuzz): add grep_fuzz target for ReDoS prevention ([#1148](https://github.com/everruns/bashkit/pull/1148)) by @chaliy +* feat(fuzz): add template_fuzz target ([#1147](https://github.com/everruns/bashkit/pull/1147)) by @chaliy +* feat(fuzz): add yaml_fuzz target ([#1146](https://github.com/everruns/bashkit/pull/1146)) by @chaliy +* feat(fuzz): add sed_fuzz target ([#1145](https://github.com/everruns/bashkit/pull/1145)) by @chaliy +* feat(fuzz): add envsubst_fuzz target ([#1144](https://github.com/everruns/bashkit/pull/1144)) by @chaliy +* feat(fuzz): add base64_fuzz target ([#1143](https://github.com/everruns/bashkit/pull/1143)) by @chaliy +* fix(vfs): handle ./ prefix in path resolution ([#1142](https://github.com/everruns/bashkit/pull/1142)) by @chaliy +* fix(date): implement -r flag for file modification time ([#1141](https://github.com/everruns/bashkit/pull/1141)) by @chaliy +* feat(fuzz): add printf_fuzz target ([#1140](https://github.com/everruns/bashkit/pull/1140)) by @chaliy +* fix(redirect): fd3 redirection pattern 3>&1 >file now routes correctly ([#1139](https://github.com/everruns/bashkit/pull/1139)) by @chaliy +* fix(redirect): suppress stderr from builtins with 2>/dev/null ([#1138](https://github.com/everruns/bashkit/pull/1138)) by @chaliy +* feat(iconv): support //translit transliteration mode ([#1136](https://github.com/everruns/bashkit/pull/1136)) by @chaliy +* test(redirect): add append redirect spec tests ([#1137](https://github.com/everruns/bashkit/pull/1137)) by @chaliy +* fix(tar): pass -C directory to create_tar for VFS file resolution ([#1135](https://github.com/everruns/bashkit/pull/1135)) by @chaliy +* fix(builtins): command -v/-V now searches PATH for external scripts ([#1134](https://github.com/everruns/bashkit/pull/1134)) by @chaliy +* feat(js): expose mounts option, mountReal, and unmount on wrapper ([#1133](https://github.com/everruns/bashkit/pull/1133)) by @chaliy +* feat(js): readDir returns entries with metadata (Python parity) ([#1132](https://github.com/everruns/bashkit/pull/1132)) by @chaliy +* fix(interpreter): preserve shopt options across exec() calls ([#1131](https://github.com/everruns/bashkit/pull/1131)) by @chaliy +* fix(ci): strip python feature from all workspace crates before publish ([#1127](https://github.com/everruns/bashkit/pull/1127)) by @chaliy +* fix(ci): fix crates.io publish + add verification ([#1126](https://github.com/everruns/bashkit/pull/1126)) by @chaliy + +**Full Changelog**: https://github.com/everruns/bashkit/commits/v0.1.17 + ## [0.1.16] - 2026-04-06 ### Highlights diff --git a/Cargo.toml b/Cargo.toml index ee115730..6df46781 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -7,7 +7,7 @@ resolver = "2" members = ["crates/*"] [workspace.package] -version = "0.1.16" +version = "0.1.17" edition = "2024" license = "MIT" authors = ["Everruns"] From 61325f611e43993b8379581925f09e96980184bb Mon Sep 17 00:00:00 2001 From: Mykhailo Chalyi Date: Wed, 8 Apr 2026 01:35:41 +0000 Subject: [PATCH 2/2] chore(release): update lockfiles for v0.1.17 --- Cargo.lock | 12 ++++++------ crates/bashkit-js/package-lock.json | 4 ++-- crates/bashkit-js/package.json | 2 +- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 6780280a..55abbb1d 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -319,7 +319,7 @@ checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" [[package]] name = "bashkit" -version = "0.1.16" +version = "0.1.17" dependencies = [ "anyhow", "async-trait", @@ -362,7 +362,7 @@ dependencies = [ [[package]] name = "bashkit-bench" -version = "0.1.16" +version = "0.1.17" dependencies = [ "anyhow", "bashkit", @@ -378,7 +378,7 @@ dependencies = [ [[package]] name = "bashkit-cli" -version = "0.1.16" +version = "0.1.17" dependencies = [ "anyhow", "bashkit", @@ -391,7 +391,7 @@ dependencies = [ [[package]] name = "bashkit-eval" -version = "0.1.16" +version = "0.1.17" dependencies = [ "anyhow", "async-trait", @@ -407,7 +407,7 @@ dependencies = [ [[package]] name = "bashkit-js" -version = "0.1.16" +version = "0.1.17" dependencies = [ "bashkit", "napi", @@ -420,7 +420,7 @@ dependencies = [ [[package]] name = "bashkit-python" -version = "0.1.16" +version = "0.1.17" dependencies = [ "bashkit", "num-bigint", diff --git a/crates/bashkit-js/package-lock.json b/crates/bashkit-js/package-lock.json index 7033f00e..538f5915 100644 --- a/crates/bashkit-js/package-lock.json +++ b/crates/bashkit-js/package-lock.json @@ -1,12 +1,12 @@ { "name": "@everruns/bashkit", - "version": "0.1.16", + "version": "0.1.17", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@everruns/bashkit", - "version": "0.1.16", + "version": "0.1.17", "license": "MIT", "devDependencies": { "@langchain/core": "^1.1.39", diff --git a/crates/bashkit-js/package.json b/crates/bashkit-js/package.json index 499f0862..36f9a6f3 100644 --- a/crates/bashkit-js/package.json +++ b/crates/bashkit-js/package.json @@ -1,6 +1,6 @@ { "name": "@everruns/bashkit", - "version": "0.1.16", + "version": "0.1.17", "description": "Sandboxed bash interpreter for JavaScript/TypeScript", "main": "wrapper.js", "browser": "bashkit.wasi-browser.js",