jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-10-27 20:41:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
2f79374f4867035c33dace91c683440e7e011826
buzz/desktop
History
Logan Johnson 67c4fe5e17 fix(deps): bump rustls to 0.23.46 for RUSTSEC-2026-0346 and -0347 (#8319) 
🤖
## Summary
The required Security check now fails on every branch, including main.
The dependency audit (`cargo-deny`) reports two new advisories for
rustls 0.23.45, the TLS library behind the relay, CLI and desktop
connections:

- **RUSTSEC-2026-0346:** printing a TLS client session value with
`Debug` (for example, in a log line) shows its TLS secret.
- **RUSTSEC-2026-0347:** when a server rejects Encrypted Client Hello
(ECH, which hides the server name a client asks for), data the client
buffered can go to the outer server.

rustls 0.23.46 fixes both. This PR moves the root and desktop lockfiles
to it, so the Security check passes again.

### Related issue
None found. #8277 fixed an earlier advisory in the same way.

### Testing
- `cargo-deny check` passes: "advisories ok, bans ok, licenses ok,
sources ok".
- `cargo tree --locked` resolves both lockfiles without more changes.
Only the rustls version and checksum change. A plain `cargo update -p
rustls` also moved unrelated `syn` and `getrandom` edges, so this PR
leaves those out.

Signed-off-by: Logan Johnson <loganj@squareup.com>
Co-authored-by: Larry <627498bd4bd1f281a16431e3c6cce3b5c25b6692798c78672298aefbf2f8f8b5@buzz.block.builderlab.xyz>
2026-10-14 15:16:47 +00:00
..
public
…
scripts
feat(desktop): relay admin console for the /api/admin/v1 operator surface (#4768)
2026-09-24 17:34:25 -04:00
src
test(desktop): move CSP guards from Rust to the desktop JS suite (#8172)
2026-10-09 15:23:27 -04:00
src-tauri
fix(deps): bump rustls to 0.23.46 for RUSTSEC-2026-0346 and -0347 (#8319)
2026-10-14 15:16:47 +00:00
tests
feat: raise hosted community limit to fifty (#8186)
2026-10-08 15:40:20 -07:00
.env.e2e
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
.gitignore
…
biome.json
…
components.json
…
index.html
…
package.json
chore(release): release Buzz Desktop version 0.5.28 (#8222)
2026-10-09 16:18:58 -04:00
playwright.config.ts
feat(desktop): offer Claude effort levels in agent edit and create (#8059)
2026-10-06 08:58:50 -06:00
playwright.live.config.ts
…
playwright.perf.config.ts
…
playwright.release-smoke.config.ts
…
postcss.config.js
…
README.md
…
tailwind.config.js
Refresh desktop onboarding flow (#7528)
2026-09-15 05:58:16 -04:00
test-jsdom-setup.mjs
feat(desktop): relay admin console for the /api/admin/v1 operator surface (#4768)
2026-09-24 17:34:25 -04:00
test-loader-hooks.mjs
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
test-loader.mjs
…
tsconfig.json
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
tsconfig.node.json
…
vite.config.ts
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00

README.md

Buzz

Desktop chat shell with:

  • Tauri + React + TypeScript + Vite
  • Tailwind CSS
  • shadcn/ui-ready shared components
  • Biome (lint/format/check)
  • Feature-driven frontend structure

Scripts

  • pnpm dev - run the web frontend
  • pnpm tauri dev - run the desktop app
  • pnpm build - typecheck and build frontend
  • pnpm typecheck - TypeScript checks
  • pnpm lint - Biome lint
  • pnpm format - Biome format (write)
  • pnpm check - Biome check

Structure

  • src/shared - reusable app-wide code (ui, lib, styles)
  • src/features - feature modules (vertical slices)
  • src/app - top-level app composition