Skip to content

Bump to 1.36.4 - #75

Merged
ww-mw merged 1 commit into
mainfrom
bump-1.36.4
Oct 12, 2026
Merged

ww-mw merged 1 commit into
mainfrom
bump-1.36.4

Conversation

@ww-mw

@ww-mw ww-mw commented Oct 11, 2026

Copy link
Copy Markdown
Member

Version bump only: package.json's version and the two "version" fields of package-lock.json, 1.36.3 → 1.36.4. Nothing in dist/ carries the version, so it is unchanged.

What 1.36.4 carries since v1.36.3:

After merge, v1.36.4 is tagged on the merged main, and mathworks/data-explorer-vscode moves its pin to it.

…cking regex, and a struct type named toString is one

Four patterns that a file's own bytes reach were quadratic or cubic on a backtracking engine:
the interface-dictionary tag scan (code-scanning alert 2), a decimal's digits in
parseComplexNum and NUMERIC_RE, and the cdata `.0` drop. Each now runs in linear time with
the same results (#74). A modeled data type named after an Object.prototype member, such as
toString or constructor, is classified as what it is, and a new entry's uuid comes from
crypto.getRandomValues in the same shape as before (#73). CI's token is read-only, and
source-map-js is locked at 1.2.2 (#72).
@ww-mw
ww-mw merged commit fcf4b46 into main Oct 12, 2026
4 checks passed
@ww-mw
ww-mw deleted the bump-1.36.4 branch October 12, 2026 00:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant