Reliability and dependency maintenance release. The existing CLI, keybindings,
configuration, and default feature set remain unchanged.
Fixed
- Kept selection, focus, preview, and reload state consistent during interactive
navigation. - Hardened filesystem boundary checks for file operations, symlinks, directory
copies, snapshots, and MCP requests. - Applied file-sort permutations correctly so entries and their metadata stay
aligned. - Resolved Git through the platform search path instead of assuming a fixed
executable location.
Security
- Updated the dependency graph to resolve the current RustSec advisories in
anyhow,quick-xml, andcrossbeam-epoch. - Replaced the affected
aesandlrureleases with corrected versions.
Changed
- Updated
mluato 0.12 andtiktoken-rsto 0.12 while preserving the Lua
plugin API and token-count behavior covered by existing tests. - Removed unused clipboard image dependencies and a duplicate
tempfile
declaration. - Strengthened locked default and minimal-feature CI checks across Linux,
macOS, Windows, and the minimum supported Rust version. - Added maintainer approval and crates.io Trusted Publishing to releases, with
dependency changes included in the generated release notes.
Dependency changes
Package: fileview
mluaupgraded to version 0.12ratatui-imageupgraded to version 11.0.2tiktoken-rsupgraded to version 0.12
What's Changed
- ci(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #225
- ci(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #222
- chore(deps): bump ratatui-image from 10.0.6 to 11.0.2 by @dependabot[bot] in #218
- chore(deps): bump the rust-minor-patch group across 1 directory with 4 updates by @dependabot[bot] in #224
- chore(deps): update dependencies safely by @Hiro-Chiba in #235
- ci: require approval for automated releases by @Hiro-Chiba in #236
- chore(release): prepare v2.7.5 by @Hiro-Chiba in #237
- test: gate Unix-only integration imports by @Hiro-Chiba in #238
Full Changelog: v2.7.4...v2.7.5