wails/v3/UNRELEASED_CHANGELOG.md
Lea Anthony d15d35a25e Merge v3-alpha into fix/security-issues-bundle and address review comments
Resolve merge conflicts:
- build-and-test-v3.yml: take v3-alpha step names (non-experimental GTK4)
- linux_cgo_gtk4.h: remove WailsScreen struct (deleted in v3-alpha)

Address PR review comments:
- screen/main.go: use path.Clean for HTTP paths instead of filepath.Clean,
  fix Windows drive-letter check (was dead code), add filepath.FromSlash
- UNRELEASED_CHANGELOG.md: remove duplicate changelog entry
- build-and-test-v3.yml: add actions:write permission to cleanup job

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-28 15:38:47 +11:00

1.7 KiB

Unreleased Changes

Added

  • Add support for modal sheets (macOS)

Changed

Fixed

Deprecated

Removed

Security

  • Restrict GITHUB_TOKEN permissions in workflow files to follow principle of least privilege
  • Fix path traversal vulnerability in screen example asset middleware
  • Fix command injection vulnerability in setup wizard dependency installation endpoint
  • Update rollup to 3.29.5 to fix XSS vulnerability (CVE-2024-47068)

Example Entries:

Added:

  • Add support for custom window icons in application options
  • Add new SetWindowIcon() method to runtime API (#1234)

Changed:

  • Update minimum Go version requirement to 1.21
  • Improve error messages for invalid configuration files

Fixed:

  • Fix memory leak in event system during window close operations (#5678)
  • Fix crash when using context menus on Linux with Wayland

Security:

  • Update dependencies to address CVE-2024-12345 in third-party library