jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-10-27 12:40:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
4250014baee071f0f940c081afbbbf876c0d32d0
buzz/desktop
History
Logan Johnson 9e8c9fc04d fix(deps): bump ctutils to 0.4.5 for RUSTSEC-2026-0385 (#8560) 
🤖
## Summary
On 2026-10-23, RustSec published RUSTSEC-2026-0385 against `ctutils`, a
constant-time helper crate used by the RustCrypto hashing and HMAC
crates. Some of its functions were meant to run in constant time, so
their timing would reveal nothing about secret values, but in versions
before 0.4.4 they could compile to code that branches on those values.
Since the advisory came out, `cargo-deny check` reports advisories as
failed. That breaks `Security Domain / Security` on `main` and on every
PR that runs the Rust security job.

This PR changes `ctutils` from 0.4.2 to 0.4.5 in the three lockfiles
that pin it: `Cargo.lock`, `desktop/src-tauri/Cargo.lock`, and the
`buzz-feature-flags` relay-feature-selection test fixture. No other
packages change.

| Advisory | Crate | Change |
|---|---|---|
| [RUSTSEC-2026-0385](https://rustsec.org/advisories/RUSTSEC-2026-0385)
| `ctutils` (non-constant-time mask generation and `u128` comparisons) |
0.4.2 → 0.4.5 |

### Related issue
N/A. I searched open and closed PRs for `ctutils` and
`RUSTSEC-2026-0385` and found none.

### Testing
- `cargo deny check advisories`: `advisories ok`. On `origin/main` the
Security job fails on this advisory.
- `cargo check --workspace` passes.
- `cargo test -p buzz-feature-flags --test
relay_feature_selection_contract` passes. This test compiles the fixture
with `--locked`.
- The pre-push hook's Rust and Tauri lanes pass.

Signed-off-by: Logan Johnson <loganj@squareup.com>
Co-authored-by: Larry <627498bd4bd1f281a16431e3c6cce3b5c25b6692798c78672298aefbf2f8f8b5@buzz.block.builderlab.xyz>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-23 15:28:39 -04:00
..
public
feat(desktop): add Pi agent preset (#7208)
2026-09-01 17:41:09 -04:00
scripts
feat(desktop): relay admin console for the /api/admin/v1 operator surface (#4768)
2026-09-24 17:34:25 -04:00
src
fix(desktop): surface a missing DATABRICKS_HOST instead of loading models forever (#8504)
2026-10-20 18:03:48 -07:00
src-tauri
fix(deps): bump ctutils to 0.4.5 for RUSTSEC-2026-0385 (#8560)
2026-10-23 15:28:39 -04:00
tests
fix(mobile): restore channel icons and align chat colors with desktop (#8478)
2026-10-20 13:48:12 -04:00
.env.e2e
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
.gitignore
test: add deterministic desktop release smoke (#5699)
2026-08-13 14:49:40 -07:00
biome.json
…
components.json
…
index.html
fix(desktop): externalize boot <style> to prevent Tauri CSP nonce override (#5242)
2026-08-07 15:05:38 -07:00
package.json
chore(release): release Buzz Desktop version 0.5.28 (#8222)
2026-10-09 16:18:58 -04:00
playwright.config.ts
feat(desktop): offer Claude effort levels in agent edit and create (#8059)
2026-10-06 08:58:50 -06:00
playwright.live.config.ts
feat(desktop+acp): spawn a harness per (agent, community) pair at GUI startup — warm sockets, lazy LLM pool (#2122)
2026-07-22 13:24:46 -07:00
playwright.perf.config.ts
fix(desktop): single-owner anchored scroll for dynamic loading (#1115)
2026-06-18 20:40:05 -04:00
playwright.release-smoke.config.ts
test: add deterministic desktop release smoke (#5699)
2026-08-13 14:49:40 -07:00
postcss.config.js
…
README.md
Rename desktop app to Buzz (#960)
2026-06-11 15:06:24 +00:00
tailwind.config.js
Refresh desktop onboarding flow (#7528)
2026-09-15 05:58:16 -04:00
test-jsdom-setup.mjs
feat(desktop): relay admin console for the /api/admin/v1 operator surface (#4768)
2026-09-24 17:34:25 -04:00
test-loader-hooks.mjs
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
test-loader.mjs
feat(desktop): thread-aware notifications with mutable follow/mute controls (#761)
2026-05-28 18:43:41 -04:00
tsconfig.json
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
tsconfig.node.json
…
vite.config.ts
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00

README.md

Buzz

Desktop chat shell with:

  • Tauri + React + TypeScript + Vite
  • Tailwind CSS
  • shadcn/ui-ready shared components
  • Biome (lint/format/check)
  • Feature-driven frontend structure

Scripts

  • pnpm dev - run the web frontend
  • pnpm tauri dev - run the desktop app
  • pnpm build - typecheck and build frontend
  • pnpm typecheck - TypeScript checks
  • pnpm lint - Biome lint
  • pnpm format - Biome format (write)
  • pnpm check - Biome check

Structure

  • src/shared - reusable app-wide code (ui, lib, styles)
  • src/features - feature modules (vertical slices)
  • src/app - top-level app composition