Skip to content

Sync with Opencut - #1

Open
Ekaanth wants to merge 233 commits into
Ekaanth:mainfrom
OpenCut-app:main
Open

Sync with Opencut#1
Ekaanth wants to merge 233 commits into
Ekaanth:mainfrom
OpenCut-app:main

Conversation

@Ekaanth

@Ekaanth Ekaanth commented Apr 10, 2026

Copy link
Copy Markdown
Owner

⚠️ READ BEFORE SUBMITTING ⚠️

We are not currently accepting PRs except for critical bugs.

If this is a bug fix:

  • I've opened an issue first
  • This was approved by a maintainer

If this is a feature:

This PR will be closed. Please open an issue to discuss first.

mazeincoding and others added 30 commits March 24, 2026 14:18
Fix for #703.

Adds an optional sampleRate parameter to the decodeAudioToFloat32() function. The caption transcriber passes in a value of 16000 to prepare audio in the format Whisper expects.
Introduce `bridge` proc-macro crate with `#[export]` attribute that conditionally applies `wasm_bindgen` for WASM builds, and `time` crate porting all timecode/frame utilities from TypeScript to Rust.
#753)

* fix(security): replace new Function() with safe math expression parser

Replace the dangerous new Function() constructor in evaluateMathExpression()
with a recursive descent parser that safely evaluates basic arithmetic
expressions.

The Function constructor is a security anti-pattern that could enable
arbitrary code execution if the validation regex is ever bypassed or
relaxed. The new parser:

- Only supports numbers, +, -, *, /, parentheses, and whitespace
- Has no eval-like functionality that could execute arbitrary code
- Maintains backward compatibility with existing expressions
- Handles operator precedence and parentheses correctly

Fixes #725

* Apply suggestion from @coderabbitai[bot]

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

---------

Co-authored-by: Maze <167211895+mazeincoding@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

Ekaanth commented Jul 17, 2026

Copy link
Copy Markdown
Owner Author

placeholder

cursoragent and others added 15 commits July 17, 2026 21:19
…alls deps

With 'javascript: {}', moon v2 never adds an InstallDependencies action
to the graph, so fresh clones fail with 'vite: command not found' when
running any web/api task (#846). The javascript toolchain drives
installs and must be told bun is the package manager.

Also drop 'bun.installDependencies: true' (defaults to true, and was
inert without packageManager set) and stale comments.

Fixes #846

Co-authored-by: Maze <mazeincoding@users.noreply.github.com>
Co-authored-by: Maze <mazeincoding@users.noreply.github.com>
Co-authored-by: Maze <mazeincoding@users.noreply.github.com>
@cursor
cursor Bot force-pushed the main branch 2 times, most recently from b2d9349 to 400f097 Compare August 1, 2026 21:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants