0.0.3: expand supported formats, improve viewer, harden fuzzing

.github/workflows/ci.yml

@@ -24,13 +24,24 @@ jobs:
       # default build, so lint it in a dedicated pass.
       - run: cargo clippy -p exav-core --all-targets --features unstable-internals -- -D warnings
       - run: cargo clippy -p exav-render --all-targets --features dwg -- -D warnings
-      - run: cargo clippy -p exav-render --all-targets --no-default-features --features ifc,stl -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features ifc,stl,obj,ply,gltf -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features markdown -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features text-pdf -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features office-sheets -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features office-slides -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features office-docs -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features office,office-test-util -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features -- -D warnings
+      - run: cargo clippy -p exav-render --all-targets --no-default-features --features text-office,office-test-util -- -D warnings
+      - run: cargo clippy -p exav-core --all-targets --features visible-text-office -- -D warnings
+      - run: cargo clippy -p exav-grep --all-targets --features text-office -- -D warnings
+      - run: cargo clippy -p exav-unpack --all-targets --features text-pdf -- -D warnings
       # The full native test matrix, every feature pass. Defined once in the
       # Makefile so this and a local `make test` can't drift.
       - run: make test-native
 
-  # The promised floor is `rust-version` in Cargo.toml (1.92, imposed by the
-  # hayro image decoders). `make msrv` reads it there and installs that toolchain on
+  # The promised floor is `rust-version` in Cargo.toml (1.95, imposed by the
+  # delharc LHA reader). `make msrv` reads it there and installs that toolchain on
   # demand, so a bump flows through with no edit here, and a contributor on
   # stable can't land a newer feature without this going red.
   msrv:
@@ -194,7 +205,7 @@ jobs:
           # the masked fixtures are unmasked.
           seeds="$RUNNER_TEMP/fuzz-seeds"
           scripts/fuzz-seeds.sh "$seeds"
-          for t in filetype sigs cvd pe unpack analyze bytecode full_pipeline seekable yara pcre clamd icap volumes authenticode database ndb_compile rar3_ppmd pe_emulator x86_decode parser_recursion imagehash drawing cad_dxf cad_dwg ifc; do
+          for t in filetype sigs cvd pe unpack analyze bytecode full_pipeline seekable yara pcre clamd icap volumes authenticode database ndb_compile rar3_ppmd pe_emulator x86_decode parser_recursion imagehash drawing cad_dxf cad_dwg ifc mesh; do
             mkdir -p "fuzz/corpus/$t"
             extra=""
             [ -d "$seeds/$t" ] && extra="$seeds/$t"

.github/workflows/www.yml

@@ -49,6 +49,10 @@ jobs:
             --site "${{ steps.pages.outputs.origin }}" \
             --base "${{ steps.pages.outputs.base_path }}"
         working-directory: ${{ env.BUILD_PATH }}
+      # Every internal link and #anchor of the built pages must resolve (offline,
+      # a second or two). The demo's own pages are copied in below.
+      - name: Check internal links
+        run: node scripts/check-links.mjs ${{ env.BUILD_PATH }}/dist
       # The @exav/viewer demo, served at /viewer/demo/: the package and its wasm
       # modules built from this commit, the archive engine's pkg/ too.
       - uses: dtolnay/rust-toolchain@stable
@@ -71,8 +75,14 @@ jobs:
           npm ci
           npm run build:wasm
           npm run build
-          # The sidebar's files: github.com/sylvinus/exav-samples, HEAD.
+          # The sidebar's files, from the network: github.com/sylvinus/exav-samples, HEAD.
           npm run demo:showcase
+          # `demo:build` runs `npm run demo:examples` first: the example files
+          # committed under demo/examples/files/ are copied, and the others (tens
+          # of MB, from Zenodo, figshare, Wikimedia Commons and the like) are
+          # downloaded at build time, each checked against its size and SHA-256 in
+          # demo/examples/examples.json. The build fails when one cannot be fetched
+          # or has changed.
           # DEMO_ORIGIN goes into the sandboxed frame's policy, for Safari.
           DEMO_BASE="${{ steps.pages.outputs.base_path }}/viewer/demo/" DEMO_ORIGIN="${{ steps.pages.outputs.origin }}" npm run demo:build
           # dist/viewer/ holds the File viewer docs; the demo must not land on them.

.oss-scanner/Dockerfile

@@ -4,7 +4,7 @@
 #
 # Build it the way the scanner does, from the repository root:
 #   docker build -f .oss-scanner/Dockerfile -t exav-oss-scanner .
-FROM rust:1.92-bookworm
+FROM rust:1.95-bookworm
 
 # Frame pointers and line tables for a debugger, without the full debug info
 # that makes the build several times larger.