[coderabbitai]

The committed range extends substantially beyond the thumbnail denial-of-service fix in src/download.rs.

• Limit thumbnail decoding to 2048×2048 and 16 MiB while preserving 480×270 previews.
• Bound image metadata removal, EPUB content, PDF tables, CSO decompression batches, and reverse/silence-trimming memory use; improve PDF word-wrapping performance and CSO cancellation.
• Verify protected Debian package copies before privileged installation and use structured shell-menu markers to prevent cleanup path injection.
• Avoid repeated batch output collision scans, remove redundant tooltip handling, and update dependencies.

Validation: Regression tests are included for resource limits, cancellation, update verification, cleanup safety, and output allocation. Validation was not run.

View coding task

[coderabbitai]

Important

Review skipped

This PR was authored by the user configured for CodeRabbit reviews. CodeRabbit does not review PRs authored by this user. It's recommended to use a dedicated user account to post CodeRabbit review feedback.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: c42281a5-8425-49dd-8798-a4dfd0baa905

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts