yenru0/zed
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
cc4c513567227dccda10afbcdefbf1ea0bd5816e
zed/crates
T
History
Richard Feldman cc4c513567 Add tests for user-reported rm security bypass variants (#48647) 
Builds on top of #48620 to add explicit test coverage for the exact
bypass scenarios reported by users:

- `rm -rf /etc/../` — path traversal via single parent dir that
normalizes to `/`
- `rm -rf --no-preserve-root /` — long flag without `=value` that could
bypass the old regex
- `rm --no-preserve-root -rf /` — long flag positioned before short
flags
- `rm / -rf --no-preserve-root` — trailing long flag without `=value`
after the path operand
- `sudo rm -rf /`, `sudo rm -rf /*`, `sudo rm -rf --no-preserve-root /`
— sudo-prefixed variants

All of these cases are already correctly blocked by the hardened regex
patterns and path normalization logic added in #48620. These tests
confirm that the reported bypasses are addressed and guard against
regressions.

Release Notes:

- N/A
2026-02-06 22:46:16 +00:00
..
acp_thread
agent: Highlight latest models available through the Zed provider (#48614)
2026-02-06 14:03:03 -05:00
acp_tools
ui: Improve performance in the CopyButton component (#47292)
2026-01-21 13:40:42 -03:00
action_log
git: Side-by-side diff UI (#47349)
2026-01-22 02:31:14 -05:00
activity_indicator
remote: Support opening builtin host files in remote workspaces on wsl (#46910)
2026-01-15 15:21:57 +00:00
agent
Add tests for user-reported rm security bypass variants (#48647)
2026-02-06 22:46:16 +00:00
agent_servers
acp: Cleanup unneeded cx from config state methods (#48353)
2026-02-04 13:12:49 +00:00
agent_settings
agent: Add agent.default_model.enable_thinking setting (#48536)
2026-02-05 23:35:44 +00:00
agent_ui
Fix MCP tool name parsing: use newline delimiter instead of colon (#48636)
2026-02-06 17:31:50 -05:00
agent_ui_v2
agent_ui: Refactor AcpThreadView (#48339)
2026-02-04 18:51:57 +01:00
ai_onboarding
Add student plan (#47866)
2026-01-28 21:34:10 +00:00
anthropic
Remove fine-grained tool streaming beta header (now GA) (#48631)
2026-02-06 21:49:14 +00:00
askpass
Revert "Allow always_allow patterns for Nushell, Elvish, and Rc shells" (#48050)
2026-01-30 21:26:13 +00:00
assets
…
assistant_slash_command
Handle removed IconName variants in text thread deserialization (#47624)
2026-01-26 23:56:55 +00:00
assistant_slash_commands
build: Tear up crate graph (move terminal closer to editor) (#48602)
2026-02-06 20:14:35 +01:00
assistant_text_thread
build: Tear up crate graph (move terminal closer to editor) (#48602)
2026-02-06 20:14:35 +01:00
audio
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
auto_update
remote: Add configurable remote server cache retention (default 5) (#47202)
2026-01-26 07:25:51 +00:00
auto_update_helper
auto_update: Ignore dir removal errors on windows (#42435)
2025-11-11 12:55:19 +00:00
auto_update_ui
remote: Support opening builtin host files in remote workspaces on wsl (#46910)
2026-01-15 15:21:57 +00:00
aws_http_client
…
bedrock
bedrock: Add Bedrock API key authentication support (#41393)
2025-12-17 12:54:57 +01:00
breadcrumbs
Clean up some Cargo.toml files (#48623)
2026-02-06 20:21:19 +00:00
buffer_diff
multi_buffer: Optimize a bunch of things (#48519)
2026-02-05 20:10:02 +00:00
call
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
channel
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
cli
cli: Teach --diff to recurse into directories and add a MultiDiffView (#45131)
2026-01-30 10:14:36 +01:00
client
client: Fix ACP registry blog post URL (#47881)
2026-01-28 18:28:53 +00:00
clock
text: Improve panic messages with more information (#42072)
2025-11-06 09:16:45 +00:00
cloud_api_client
Use cloud for auto-update (#42246)
2025-11-10 23:00:55 -07:00
cloud_api_types
Add student plan (#47866)
2026-01-28 21:34:10 +00:00
cloud_llm_client
agent: Highlight latest models available through the Zed provider (#48614)
2026-02-06 14:03:03 -05:00
codestral
Fix Codestral API key credentials URL mismatch (#48513)
2026-02-05 17:34:34 -05:00
collab
Add textDocument/foldingRange LSP support (#48611)
2026-02-06 18:06:01 +00:00
collab_ui
ci: Parse Cargo.toml and Cargo.lock with Python script to determine affected packages (#48389)
2026-02-04 19:31:25 +00:00
collections
…
command_palette
Revert "Revert scheduler update (#46659)" (#46671)
2026-01-14 07:19:13 +00:00
command_palette_hooks
…
component
…
component_preview
build: Simplify build graph (#47253)
2026-01-23 18:29:20 +01:00
context_server
Revert "Allow always_allow patterns for Nushell, Elvish, and Rc shells" (#48050)
2026-01-30 21:26:13 +00:00
copilot
Differentiate between explicit rejection and ignored in ep acceptance tracking (#48409)
2026-02-04 17:54:11 -05:00
copilot_chat
Revert "Remove VS Code references from Copilot integration" (#48555)
2026-02-06 03:34:34 +00:00
copilot_ui
settings_ui: Fix tab navigation in edit predictions settings (#48530)
2026-02-05 22:04:21 +00:00
crashes
Revert "Revert scheduler update (#46659)" (#46671)
2026-01-14 07:19:13 +00:00
credentials_provider
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
dap
dap: Make ProtoConversion::to_proto consume self (#47871)
2026-01-28 16:00:52 +00:00
dap_adapters
Auto-detect Rust for CodeLLDB panic breakpoints (#48236)
2026-02-04 04:44:42 -05:00
db
…
debug_adapter_extension
Revert "Revert scheduler update (#46659)" (#46671)
2026-01-14 07:19:13 +00:00
debugger_tools
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
debugger_ui
debugger: Wrap TaskContext in Arc to reduce cloning overhead (#47087)
2026-02-05 10:37:39 +00:00
deepseek
deepseek: Fix for max output tokens blocking completions (#45236)
2025-12-18 12:47:34 +00:00
denoise
…
dev_container
Refer to devcontainer.js rather than devcontainer.cmd.js (#48387)
2026-02-04 10:48:40 -08:00
diagnostics
Clean up some Cargo.toml files (#48623)
2026-02-06 20:21:19 +00:00
docs_preprocessor
editor: Implement semantic highlighting (#46356)
2026-02-04 17:37:13 +00:00
edit_prediction
Remove zeta example capturing (#48627)
2026-02-06 16:11:40 -05:00
edit_prediction_cli
Do not pass zeta prompt format in production endpoint (#48541)
2026-02-06 00:31:24 -08:00
edit_prediction_context
Introduce new predict_edits/v3 endpoint (#46960)
2026-01-16 02:16:34 +00:00
edit_prediction_types
Differentiate between explicit rejection and ignored in ep acceptance tracking (#48409)
2026-02-04 17:54:11 -05:00
edit_prediction_ui
Improve rate predictions modal (#48630)
2026-02-06 21:46:27 +00:00
editor
Support custom fold text for LSP folds (#48624)
2026-02-06 22:24:38 +02:00
encoding_selector
encoding: Add "reopen with encoding" (#46553)
2026-01-27 05:27:26 +00:00
eval
agent: Add support for setting thinking effort for Zed provider (#48545)
2026-02-06 01:04:53 +00:00
eval_utils
Fix self-referential symbolic link (#45265)
2025-12-18 17:26:20 +01:00
explorer_command_injector
…
extension
lsp: Add container_name to lsp::Symbol (#46822)
2026-02-04 23:03:15 +01:00
extension_api
extension_api: Add digest to GithubReleaseAsset (#48413)
2026-02-05 12:13:02 +00:00
extension_cli
extension: Ensure that compiled extension provides at least one feature (#47715)
2026-01-28 14:25:47 +01:00
extension_host
extension_api: Add digest to GithubReleaseAsset (#48413)
2026-02-05 12:13:02 +00:00
extensions_ui
acp: Add agent server extension deprecation banner (#47817)
2026-01-28 10:28:43 +01:00
feature_flags
feature_flags: Rename cloud-thinking-toggle feature flag (#48598)
2026-02-06 16:11:32 +00:00
feedback
…
file_finder
Don't watch parent directory of global gitexcludes file (#48408)
2026-02-06 07:02:06 +00:00
file_icons
…
fs
fs: Cache filesystem case sensitivity (#47995)
2026-01-30 09:42:28 +01:00
fs_benchmarks
fs: Reintroduce benchmarks crate (#40689)
2025-10-20 10:30:06 +00:00
fuzzy
fuzzy: Use lowercase representations for matrix size calculation (#44338)
2025-12-08 19:50:20 +01:00
git
Revert "git: Fix stage/unstage failure with a large number of files (#47800)" (#48238)
2026-02-03 04:24:11 +00:00
git_graph
git: Use CDN endpoint for GitHub avatars to avoid rate limiting (#47894)
2026-01-31 13:49:42 -05:00
git_hosting_providers
Implement extract_pull_request for GitLab provider (#47973)
2026-01-31 21:56:34 +00:00
git_ui
Respect workspace override in git: diff (#48535)
2026-02-06 12:03:52 -05:00
go_to_line
Add optional relative line jumps to go-to-line action (#46932)
2026-01-27 05:51:11 +00:00
google_ai
google_ai: Refactor token count methods in Google AI (#45184)
2025-12-17 20:12:40 -06:00
gpui
Update cosmic-text to v0.17 to fix font ligatures on Linux (#48504)
2026-02-05 20:28:31 +00:00
gpui_macros
gpui: Add min_size and max_size style methods (#47775)
2026-01-27 15:37:22 -03:00
gpui_tokio
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
html_to_markdown
…
http_client
Remove reqwest dependency from gpui (#44424)
2025-12-09 09:29:40 -08:00
http_client_tls
…
icons
git: Add toolbar buttons for SplittableEditor (#48323)
2026-02-05 04:15:41 +00:00
image_viewer
editor: Put more syntax walking features on the background (#48450)
2026-02-05 09:31:11 +00:00
inspector_ui
build: Simplify build graph (#47253)
2026-01-23 18:29:20 +01:00
install_cli
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
journal
multi_buffer: Typed MultiBufferOffset (#42707)
2025-11-19 22:00:58 +00:00
json_schema_store
lsp: Add schema support for LSP settings field (#48332)
2026-02-04 23:45:52 +01:00
keymap_editor
build: Simplify build graph (#47253)
2026-01-23 18:29:20 +01:00
language
Remove zeta example capturing (#48627)
2026-02-06 16:11:40 -05:00
language_extension
lsp: Add container_name to lsp::Symbol (#46822)
2026-02-04 23:03:15 +01:00
language_model
agent: Highlight latest models available through the Zed provider (#48614)
2026-02-06 14:03:03 -05:00
language_models
agent: Highlight latest models available through the Zed provider (#48614)
2026-02-06 14:03:03 -05:00
language_onboarding
…
language_selector
build: Simplify build graph (#47253)
2026-01-23 18:29:20 +01:00
language_tools
Follow-up semantic token fixes (#48485)
2026-02-05 15:06:02 +00:00
languages
languages: Remove duplicate keywords in JS syntax highlighting (#48460)
2026-02-05 12:23:39 +01:00
line_ending_selector
Fix keybind hints flickering in certain scenarios (#40927)
2025-10-22 19:52:38 +00:00
livekit_api
Update Rust crate jsonwebtoken to v10 [SECURITY] (#48294)
2026-02-03 15:51:40 -05:00
livekit_client
livekit_client: Revert #46986 for macos (#46990)
2026-01-16 14:20:23 +00:00
lmstudio
…
lsp
Support custom fold text for LSP folds (#48624)
2026-02-06 22:24:38 +02:00
markdown
markdown: Fix markdown table selection hit testing (#47720)
2026-02-02 16:37:58 +00:00
markdown_preview
Add item for opening Markdown/SVG files in preview tab in right-click menu (#47821)
2026-01-28 00:19:13 -03:00
media
…
menu
ui: Add submenus to ContextMenu (#45743)
2025-12-30 07:49:01 -03:00
migrator
Fix settings migrations for nested platform/channel/profile keys (#48550)
2026-02-06 16:50:36 +00:00
miniprofiler_ui
Revert "Revert scheduler update (#46659)" (#46671)
2026-01-14 07:19:13 +00:00
mistral
Fix Codestral API key credentials URL mismatch (#48513)
2026-02-05 17:34:34 -05:00
multi_buffer
multi_buffer: Optimize a bunch of things (#48519)
2026-02-05 20:10:02 +00:00
nc
smol: Use Unblock instead of Async for stdin, stdout and stderr handles (#46141)
2026-01-06 08:14:34 +00:00
net
…
node_runtime
acp: Allow running NPM agents from registry (#47291)
2026-01-21 14:52:44 +00:00
notifications
gpui: Actually remove the Result from AsyncApp (#45809)
2026-01-07 12:48:24 -08:00
ollama
Add initial support for edit predictions via Ollama (#48233)
2026-02-04 01:33:12 +00:00
onboarding
editor: Put more syntax walking features on the background (#48450)
2026-02-05 09:31:11 +00:00
open_ai
ep: Use rejected_output for DPO training + OpenAI support (#47697)
2026-01-27 13:02:40 +00:00
open_path_prompt
Fix open path prompt not showing hidden files (#46965)
2026-01-31 09:57:31 +02:00
open_router
Fix Gemini 3 on OpenRouter (#43416)
2025-11-24 13:24:26 -05:00
outline
outline: Enable scrollbar in outline view picker (#46774)
2026-01-14 08:06:55 -03:00
outline_panel
project_panel: Show Reveal in File Manager on wsl (#47288)
2026-01-22 11:24:23 +00:00
panel
build: Decouple git_ui from recent_projects (#48062)
2026-02-02 13:30:07 +01:00
paths
Fix text_threads_dir() non-compliance with XDG spec (#45771)
2026-02-06 15:34:36 +00:00
picker
build: Simplify build graph (#47253)
2026-01-23 18:29:20 +01:00
platform_title_bar
build: Simplify build graph (#47253)
2026-01-23 18:29:20 +01:00
prettier
editor: Implement semantic highlighting (#46356)
2026-02-04 17:37:13 +00:00
project
Support custom fold text for LSP folds (#48624)
2026-02-06 22:24:38 +02:00
project_benchmarks
ep_cli: Fix "Too many open files" errors (#47243)
2026-01-20 15:41:31 -05:00
project_panel
project_panel: Refactor selection state ownership (#48586)
2026-02-06 18:41:08 +05:30
project_symbols
Revert "Revert scheduler update (#46659)" (#46671)
2026-01-14 07:19:13 +00:00
prompt_store
Revert "Allow always_allow patterns for Nushell, Elvish, and Rc shells" (#48050)
2026-01-30 21:26:13 +00:00
proto
Support custom fold text for LSP folds (#48624)
2026-02-06 22:24:38 +02:00
recent_projects
Housekeeping: Improve error handling and small fixes (#48552)
2026-02-05 22:58:55 -05:00
refineable
gpui: Make refining a Style properly refine the TextStyle (#42852)
2025-12-15 13:30:13 +00:00
release_channel
release_version: Do not use prerelease field (#43669)
2025-11-27 13:46:43 +00:00
remote
remote: Fix build_remote_server_from_source compression on unix (#48319)
2026-02-04 09:15:21 +00:00
remote_connection
build: Decouple git_ui from recent_projects (#48062)
2026-02-02 13:30:07 +01:00
remote_server
project_panel: Add right-click download option for folders/files stored in remote development server (#47344)
2026-02-03 07:12:29 +00:00
repl
repl: Add quality of life changes in Jupyter view (#47533)
2026-02-04 07:05:22 -06:00
reqwest_client
Add initial support for edit predictions via Ollama (#48233)
2026-02-04 01:33:12 +00:00
rich_text
Revert "sum_tree: Replace rayon with futures (#41586) (#41846)
2025-11-03 19:25:15 +00:00
rope
rope: Fix an unintentional panic (#47019)
2026-01-20 12:23:17 +00:00
rpc
Add textDocument/foldingRange LSP support (#48611)
2026-02-06 18:06:01 +00:00
rules_library
agent: Add support for setting thinking effort for Zed provider (#48545)
2026-02-06 01:04:53 +00:00
scheduler
Restore run_with_clock_advancement (#46930)
2026-01-15 18:39:06 +00:00
schema_generator
Add project settings schema to schema_generator CLI (#44321)
2025-12-16 10:48:14 -05:00
search
build: Tear up crate graph (move terminal closer to editor) (#48602)
2026-02-06 20:14:35 +01:00
session
Revert "Revert scheduler update (#46659)" (#46671)
2026-01-14 07:19:13 +00:00
settings
Add textDocument/foldingRange LSP support (#48611)
2026-02-06 18:06:01 +00:00
settings_content
Remove zeta example capturing (#48627)
2026-02-06 16:11:40 -05:00
settings_json
settings_ui: Show migration banner (#41112)
2025-10-27 10:13:26 -04:00
settings_macros
Fallible Settings (#42938)
2025-11-21 08:28:17 -07:00
settings_profile_selector
Automate settings registration (#42238)
2025-11-07 22:27:14 +00:00
settings_ui
settings_ui: Fix Ollama icon and other small UI details in EP subpage (#48612)
2026-02-06 18:36:25 +00:00
snippet
…
snippet_provider
extension_cli: Validate that all snippets can be parsed (#47649)
2026-01-26 13:49:26 +00:00
snippets_ui
build: Simplify build graph (#47253)
2026-01-23 18:29:20 +01:00
sqlez
…
sqlez_macros
…
story
…
storybook
collab: Improve project and call notification UI (#47964)
2026-01-29 16:33:38 -03:00
streaming_diff
Revert "sum_tree: Replace rayon with futures (#41586) (#41846)
2025-11-03 19:25:15 +00:00
sum_tree
multi_buffer: Optimize a bunch of things (#48519)
2026-02-05 20:10:02 +00:00
supermaven
Differentiate between explicit rejection and ignored in ep acceptance tracking (#48409)
2026-02-04 17:54:11 -05:00
supermaven_api
collab: Remove Supermaven API key issuance (#46044)
2026-01-04 23:28:18 +00:00
svg_preview
Add item for opening Markdown/SVG files in preview tab in right-click menu (#47821)
2026-01-28 00:19:13 -03:00
system_specs
releases: Add build number to Nightly builds (#42990)
2025-11-24 13:34:04 +01:00
tab_switcher
Add tab switcher mode similar to vim/helix buffer picker (#47079)
2026-02-05 20:25:20 +00:00
task
debugger: Wrap TaskContext in Arc to reduce cloning overhead (#47087)
2026-02-05 10:37:39 +00:00
tasks_ui
tasks: Show error for unknown ZED_ variables (#45621)
2026-01-26 19:47:36 +00:00
telemetry
Fix telemetry (#42184)
2025-11-07 11:36:05 +00:00
telemetry_events
ep_cli: rated-after: query (#47906)
2026-01-28 16:36:44 -08:00
terminal
Revert "Allow always_allow patterns for Nushell, Elvish, and Rc shells" (#48050)
2026-01-30 21:26:13 +00:00
terminal_view
build: Tear up crate graph (move terminal closer to editor) (#48602)
2026-02-06 20:14:35 +01:00
text
multi_buffer: Optimize a bunch of things (#48519)
2026-02-05 20:10:02 +00:00
theme
editor: Implement semantic highlighting (#46356)
2026-02-04 17:37:13 +00:00
theme_extension
…
theme_importer
Split settings content into its own crate (#46845)
2026-01-15 18:10:21 +00:00
theme_selector
Allow dynamic set_theme based on Appearance (#42812)
2025-12-01 20:52:57 -07:00
time_format
time_format: Determine year difference based on months passed (#47687)
2026-01-28 17:05:34 +01:00
title_bar
settings ui: Add page for AI tool permissions (#48277)
2026-02-04 03:42:35 -03:00
toolchain_selector
Added support for dismissing the toolchain path selector via esc (#48201)
2026-02-02 16:56:25 +00:00
ui
Add telemetry for EP Menu Actions (#48229)
2026-02-04 16:39:41 -05:00
ui_input
build: Decouple git_ui from recent_projects (#48062)
2026-02-02 13:30:07 +01:00
ui_macros
…
ui_prompt
…
util
Housekeeping: Improve error handling and small fixes (#48552)
2026-02-05 22:58:55 -05:00
util_macros
…
vercel
project: Move tests to integration layer (#47596)
2026-01-25 21:35:32 +01:00
vim
helix: Fix line select with empty first line (#48026)
2026-02-05 18:57:23 +01:00
vim_mode_setting
Automate settings registration (#42238)
2025-11-07 22:27:14 +00:00
watch
…
web_search
…
web_search_providers
Add helper method for checking if the LLM token needs to be refreshed (#47511)
2026-01-23 20:50:50 +00:00
which_key
Add Vim-like Which-key Popup menu (#43618)
2025-12-17 11:53:48 -07:00
workspace
build: Tear up crate graph (move terminal closer to editor) (#48602)
2026-02-06 20:14:35 +01:00
worktree
Don't watch parent directory of global gitexcludes file (#48408)
2026-02-06 07:02:06 +00:00
worktree_benchmarks
project: Always allocate WorktreeIDs on the remote client (#47936)
2026-01-29 15:31:13 +00:00
x_ai
Add support for Grok 4.1 Fast models in xAI provider (#43419)
2025-12-08 16:38:34 +01:00
zed
build: Tear up crate graph (move terminal closer to editor) (#48602)
2026-02-06 20:14:35 +01:00
zed_actions
build: Tear up crate graph (move terminal closer to editor) (#48602)
2026-02-06 20:14:35 +01:00
zed_env_vars
Enable configuring edit prediction providers through the settings UI (#44505)
2025-12-13 11:06:30 -05:00
zeta_prompt
Do not pass zeta prompt format in production endpoint (#48541)
2026-02-06 00:31:24 -08:00
zlog
zlog: Fix dynamic mod path filtering (#44296)
2025-12-06 17:56:49 +00:00
zlog_settings
Automate settings registration (#42238)
2025-11-07 22:27:14 +00:00
ztracing
ztracing: Enable memory profiling and callstack sampling (#47052)
2026-01-17 19:29:19 +00:00
ztracing_macro
adds tracing for instrumenting non-async functions (#44147)
2025-12-05 17:23:06 +00:00