Repository navigation
Conversation
Validate release ZIP headers directly instead of parsing zipinfo text. Keep existing hash, size, path, file-type and expansion limits. Preserve published 1.1.2/1.1.3 packages and the live update feed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
用户在 1.1.2 更新器中遇到“安装包文件清单不符”。现有 1.1.2/1.1.3 发布 ZIP 均包含预期的 9 个文件；该错误来自旧校验器对 unzip 文本输出行数的检查，尚未取得 Mac 上的原始输出以确定具体附加/缺失行来源。
1.1.4 直接校验 ZIP 中央目录和本地文件头，避免依赖 zipinfo 的展示格式。继续执行 SHA-256、下载字节数、精确路径白名单、普通文件、展开大小限制，并拒绝重复/冲突/隐藏/重叠条目。附不可变版本安装包与校验和；旧更新器需要退出后手动完整解压覆盖一次，保留 SSH 和偏好。
验证：28 项 Node 测试、10 项安装/自启动 CPU 测试通过；JXA 和安装脚本语法通过。新校验器接受现有 1.1.2、1.1.3 和新打包的 1.1.4，拒绝损坏文件头、重复路径、符号链接、截断和超限条目。Mac AppKit 与真实安装尚待实机验收，保持草稿。
没有覆盖旧版本包，也没有修改 Ferryyer/Ferryyer 的线上更新入口或当前别名包。手动修复包可从本分支 downloads/GPU-Queue-Widget-1.1.4-macOS.zip 下载。发布及回退说明见 docs/widget-update-1.1.4.md。