4 Commits

Include renames

Author	SHA1	Message	Date
Omar Sobh	534331ffbe	chore: Tier 4d — hoist tempfile/criterion/half/serde to workspace.dependencies ... Add [workspace.dependencies] to the root Cargo.toml for the four duplicated-across-many-crates dependencies flagged by the earlier review: tempfile (7 crates), criterion (6), half (4 — real version skew, clawhdf5-gpu pinned 2.7 while others used bare 2), and serde (4). Update every consuming crate to `dep = { workspace = true }`, preserving crate-local `optional = true` where it already existed. half now resolves uniformly to 2.7.x workspace-wide instead of two separate semver ranges. Also fixed clawhdf5-filters/Cargo.toml's stale "rustyhdf5" description while touching the file (same class of leftover rename as prior fixes). Not touching rayon/byteorder/clap (no skew found, lower priority).	2026-08-05 13:12:17 -07:00
Omar Sobh	a319405ffc	security: Tier 3 — Android JNI length validation, pyo3 bump, WAL caps ... - clawhdf5-android: validate embedding_len/query_embedding_len against the handle's configured embedding_dim (and reject null pointers) before constructing a slice via from_raw_parts in edgehdf5_save and edgehdf5_hybrid_search. Strengthen the # Safety docs to state the now-enforced invariant and its limits. Add unit tests covering mismatched length and null-pointer rejection. - clawhdf5-py: bump pyo3/numpy 0.28 -> 0.29, clearing RUSTSEC-2026-0176 (OOB read in PyList/PyTuple iterator) and RUSTSEC-2026-0177 (missing Sync bound on PyCFunction::new_closure). No source changes needed; confirmed via cargo audit that both advisories no longer appear. - clawhdf5-agent/wal.rs: cap read_len_prefixed_str/read_embedding's length claims at a new MAX_WAL_FIELD_LEN (64 MiB) before allocating, so a corrupted/truncated WAL length field fails cleanly instead of attempting a huge allocation. Add regression tests for both. - BENCHMARKS.md: add a top-of-file traceability note distinguishing the dated/hardware-cited/reproducible h5bench and tank-validation sections from the older sections that don't yet meet that bar.	2026-08-05 12:10:49 -07:00
osobhandClaude Opus 4.8	a16e9ab8cb	chore: bump workspace to 2.1.0 ... Bumps [workspace.package] and all 17 crate package versions (and internal path-dependency requirements) from 2.0.0 to 2.1.0 for a coordinated release. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-06-03 10:36:17 +00:00
redclawsystems	3f222f6956	Merge pull request 'docs(clawhdf5): document DType variants, fix unresolved doc links' (#17) from sdlc-docs/clawhdf5-types-20260514-165210 into main	2026-05-14 23:54:48 +00:00