On 2025/07/16 21:17, Volker Schlecht wrote: > Committed, thanks. > > I'm running locally with patches to disable loading workspace-specific > helix configuration files. > These files can execute arbitrary code by abusing the lsp configuration > directive (See https://github.com/helix-editor/helix/issues/9514) > > Obviously this disables an otherwise documented feature, but since I use > helix to open files in ports sources on a regular basis, it's a *very* > undesirable feature from my perspective.
I don't use helix, so an actual user's open has more weight, but that seems sane to me. If it really causes someone problems then the patch could be made conditional so it can be used as a flavour, but might be better to go with a simple disabling first to see whether that does cause a real (rather than perceived) problem. > Patch (including a fix for a whitespace nit) attached. What's your > opinion? > > On 7/16/25 12:29 PM, Laurent Cheylus wrote: > > Hi ports@ > > > > update for editors/helix to the latest version 25.07. > > Changelog: > > https://github.com/helix-editor/helix/blob/master/CHANGELOG.md#2507-2025-07-15 > > > > - update Makefile, crates.inc and distinfo for this version > > - regen patches > > - reformat pkg/DESCR for features > > > > Build and tests OK on current/amd64 with Rust 1.88.0 > > > > Tests welcome and please commit if OK. > > > > Laurent > >
