All pull requests

Pull requests

• AutoLISP: read block definitions: tblsearch BLOCK gives the first entity (-2), entnext and entget walk a block's entities (part of #1700)

  #1855·SBaksa opened Oct 21, 2026Contributor·

  ·
  1

• Linux: native Wayland by default, with in-app window buttons on GNOME

  #1853·bmh129 opened Oct 21, 2026·

  ·
  1

• security: bound font outline geometry and MTEXT line scanning (CWE-400/407)

  #1852·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  4

• security: bound constraint-engine work and allocation (CWE-400/407)

  #1851·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  6

• security: bound drawing document-model work and allocation (CWE-400/407)

  #1850·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  3

• security: budget the rendering pipeline against DoS geometry (CWE-400/407/789)

  #1849·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  7

• security: bound geometry-kernel degree and work (CWE-407)

  #1848·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  4

• security: guard the DXF->DWG conversion input and document decoder limits (CWE-789)

  #1847·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  1

• security: bound native DXF/SVG/PDF import allocation and quadratic work (CWE-400/407/789)

  #1846·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  5

• security: do not follow directory symlinks in cargo xtask stats (CWE-400)

  #1845·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  3

• security: authenticate the local control server with a per-session token (CWE-306)

  #1844·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  5

• security: submit XATTACH picked path as literal text, not a command line (CWE-74)

  #1843·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  1

• security: bound Lisp callbacks, native comparisons, and local file reads (CWE-400, CWE-407)

  #1842·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  5

• security: confine craft-fonts manifest paths and reject newline Cargo directives (CWE-22, CWE-74)

  #1841·dylanmtaylor opened Oct 21, 2026Contributor·

  ·

• security: write files atomically through an exclusive temp file (CWE-59)

  #1840·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  3

• security: enforce HTTPS on curl downloads (SonarCloud S6506)

  #1837·dylanmtaylor opened Oct 21, 2026Contributor·

  ·
  2

• DWG open: stream the DXF rendition into the tag parser (#1076, #57)

  #1835·mbolling opened Oct 21, 2026·

  ·
  4

• Spline extents: evaluate on the stack and sample relative to the spline (#1076)

  #1834·mbolling opened Oct 21, 2026·

  ·
  15

• DXF read: fewer allocations on the per-group and per-entity paths (#1076)

  #1833·mbolling opened Oct 21, 2026·

  ·
  4

• Apply a block reference's linetype scale to the objects inside the block

  #1830·philipp-tch opened Oct 21, 2026·

  ·
  1

  2

• Dynamic blocks: author linear and point parameters with stretch and move actions (BPARAMETER, BACTION)

  #1827·codyvogt opened Oct 21, 2026Contributor·

  ·
  5

• i18n(ja): Japanese interface, first step

  #1822·midasdf opened Oct 21, 2026·

  ·
  4

• Draw %%c with the style font's U+2205 or Ø when it has no U+2300, else the stroke glyph (fixes #1608)

  #1816·mbolling opened Oct 21, 2026·

  ·
  1

  5

• Find installed fonts where fontconfig looks: XDG dirs, fontconfig <dir> entries, Flatpak host fonts

  #1815·mbolling opened Oct 21, 2026·

  ·
  13

• Add a Nix flake (NixOS, GNOME, Hyprland, Sway)

  #1814·mbolling opened Oct 21, 2026·

  ·
  4