jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-10-27 04:30:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
93114b4279a619613a6df8ef740472216e1d4cfb
buzz/desktop
History
Diem Nguyen 8bbfe44f77 fix(deps): bump webpki crates for RUSTSEC-2026-0381/0382/0383 (#8499) 
## Summary
On 2026-10-19, RustSec published three advisories against the TLS
certificate crates in our lockfiles. Since then, `cargo-deny check`
fails on advisories. That breaks `Security Domain / Security` on `main`
and on every PR that runs the Rust security job.

| Advisory | Crate | Change |
|---|---|---|
| RUSTSEC-2026-0382 | `rustls-webpki` (distrusted intermediates) |
0.103.15 → 0.103.16 |
| RUSTSEC-2026-0381 | `webpki-roots` (distrusted emSign roots) |
1.0.7/1.0.8 → 1.0.10 |
| RUSTSEC-2026-0383 | `webpki-root-certs` (same roots) | 1.0.7/1.0.8 →
1.0.10 |

This PR bumps all three in `Cargo.lock` and
`desktop/src-tauri/Cargo.lock`. Only these packages change.

`webpki-roots 0.26.11` stays because `tokio-tungstenite` 0.28/0.29 (via
axum and nostr-sdk) still require `^0.26`, and no patched 0.26 release
exists. 0.26.11 is a semver-trick shim that bundles no certificates of
its own. It re-exports `webpki-roots` 1, which now resolves to the
patched 1.0.10. `deny.toml` ignores RUSTSEC-2026-0381 for that shim and
explains why. The ignore should come out once those consumers move to
`webpki-roots` 1.

### Related issue
N/A. I searched for open PRs bumping these crates and found none.

### Testing
- `cargo-deny check`: `advisories ok, bans ok, licenses ok, sources ok`.
On `origin/main` it reports `advisories FAILED`.
- `cargo check --locked -p buzz-ws-client -p buzz-cli -p buzz-relay`
passes.
- The pre-push hook's Rust unit tests pass.

Signed-off-by: Fizz <6be7be23ec5bba868f3e1db5ec86013d76bd1a293dce5b435a192158fec13641@buzz.block.builderlab.xyz>
Co-authored-by: Fizz <6be7be23ec5bba868f3e1db5ec86013d76bd1a293dce5b435a192158fec13641@buzz.block.builderlab.xyz>
2026-10-20 21:52:14 +00:00
..
public
feat(desktop): add Pi agent preset (#7208)
2026-09-01 17:41:09 -04:00
scripts
feat(desktop): relay admin console for the /api/admin/v1 operator surface (#4768)
2026-09-24 17:34:25 -04:00
src
fix(mobile): restore channel icons and align chat colors with desktop (#8478)
2026-10-20 13:48:12 -04:00
src-tauri
fix(deps): bump webpki crates for RUSTSEC-2026-0381/0382/0383 (#8499)
2026-10-20 21:52:14 +00:00
tests
fix(mobile): restore channel icons and align chat colors with desktop (#8478)
2026-10-20 13:48:12 -04:00
.env.e2e
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
.gitignore
test: add deterministic desktop release smoke (#5699)
2026-08-13 14:49:40 -07:00
biome.json
feat: pnpm workspace, deep links, and web repos page (#476)
2026-05-04 17:09:25 -07:00
components.json
…
index.html
fix(desktop): externalize boot <style> to prevent Tauri CSP nonce override (#5242)
2026-08-07 15:05:38 -07:00
package.json
chore(release): release Buzz Desktop version 0.5.28 (#8222)
2026-10-09 16:18:58 -04:00
playwright.config.ts
feat(desktop): offer Claude effort levels in agent edit and create (#8059)
2026-10-06 08:58:50 -06:00
playwright.live.config.ts
feat(desktop+acp): spawn a harness per (agent, community) pair at GUI startup — warm sockets, lazy LLM pool (#2122)
2026-07-22 13:24:46 -07:00
playwright.perf.config.ts
fix(desktop): single-owner anchored scroll for dynamic loading (#1115)
2026-06-18 20:40:05 -04:00
playwright.release-smoke.config.ts
test: add deterministic desktop release smoke (#5699)
2026-08-13 14:49:40 -07:00
postcss.config.js
fix(deps): migrate Tailwind CSS from v3 to v4 (#711)
2026-05-22 20:45:47 -04:00
README.md
Rename desktop app to Buzz (#960)
2026-06-11 15:06:24 +00:00
tailwind.config.js
Refresh desktop onboarding flow (#7528)
2026-09-15 05:58:16 -04:00
test-jsdom-setup.mjs
feat(desktop): relay admin console for the /api/admin/v1 operator surface (#4768)
2026-09-24 17:34:25 -04:00
test-loader-hooks.mjs
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
test-loader.mjs
feat(desktop): thread-aware notifications with mutable follow/mute controls (#761)
2026-05-28 18:43:41 -04:00
tsconfig.json
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00
tsconfig.node.json
…
vite.config.ts
feat(desktop): add persistent Bestie experience (#7223)
2026-09-02 17:56:17 -04:00

README.md

Buzz

Desktop chat shell with:

  • Tauri + React + TypeScript + Vite
  • Tailwind CSS
  • shadcn/ui-ready shared components
  • Biome (lint/format/check)
  • Feature-driven frontend structure

Scripts

  • pnpm dev - run the web frontend
  • pnpm tauri dev - run the desktop app
  • pnpm build - typecheck and build frontend
  • pnpm typecheck - TypeScript checks
  • pnpm lint - Biome lint
  • pnpm format - Biome format (write)
  • pnpm check - Biome check

Structure

  • src/shared - reusable app-wide code (ui, lib, styles)
  • src/features - feature modules (vertical slices)
  • src/app - top-level app composition