Justin M. Keyes 799cbfff85 fix(vim.secure): read() command injection vulnerability #39918 ...

Problem:
Malicious filename can execute code because of ":" cmdline expansion.

Solution:
Use `fnameescape()`.

fix https://github.com/neovim/neovim/issues/39914

2026-05-20 15:27:43 -04:00

..

_core

fix(startup): emitting useless OptionSet #39830

2026-05-17 12:18:24 -04:00

_ftplugin

fix(runtime): 'includeexpr' with non-Nvim-style Lua modules #33867

2025-05-06 05:15:31 -07:00

_meta

docs: misc, custom text-object #39877

2026-05-20 05:21:27 -04:00

deprecated

refactor: rename _ensure_integer => _assert_integer

2026-03-13 20:32:01 +01:00

diagnostic

fix(diagnostic): handle signs = false in status() (#39703)

2026-05-09 17:59:21 -07:00

filetype

vim-patch:9.2.0500: filetype: some html files wrongly recognized as htmlangular (#39880)

2026-05-19 08:42:05 +08:00

func

refactor: rename _ensure_integer => _assert_integer

2026-03-13 20:32:01 +01:00

health

fix(health): "Create bug report" button

2026-05-20 14:09:20 +02:00

lsp

feat(health): highlight current buffer

2026-05-20 14:09:20 +02:00

net

feat(ssh): SSH configuration parser #35027

2025-08-17 20:40:28 -07:00

pack

fix(pack): suggest "delete" code action for active plugins #39678

2026-05-08 12:26:40 +00:00

pos

refactor(pos,range): extract vim.pos._util

2026-05-20 16:23:03 +08:00

provider

feat(lua)!: vim.isnil, vim.nonnil, deprecate vim.F #39495

2026-05-06 08:15:00 -04:00

treesitter

Merge #39889 from ofseed/pos-util

2026-05-20 05:35:09 -04:00

ui

refactor(tty): tty.request() #39489

2026-04-30 07:26:40 -04:00

_async.lua

fix(vim.pack): increase default timeout #36992

2025-12-16 13:22:05 -05:00

_comment.lua

refactor(treesitter)!: get_parser return nil on error #37276

2026-03-13 15:57:36 -04:00

_init_packages.lua

refactor(tty): tty.request() #39489

2026-04-30 07:26:40 -04:00

_inspector.lua

feat(highlights): new Dimmed hl group for de-emphasized text #39505

2026-05-13 15:54:34 -04:00

_meta.lua

feat(logging): vim.log #38906

2026-05-10 11:03:15 -04:00

_watch.lua

feat(fswatch): report filewatchers in :checkhealth

2026-05-20 14:09:20 +02:00

diagnostic.lua

fix(diagnostic): handle signs = false in status() (#39703)

2026-05-09 17:59:21 -07:00

F.lua

fix(lua): increase vim.F deprecation version [skip ci] #39632

2026-05-06 11:13:15 -04:00

filetype.lua

build(lint): allow "bufnr" as positional param #39515

2026-04-30 07:12:35 -04:00

fs.lua

refactor(vim.fs): deduplicate by using vim.fn #39782

2026-05-14 13:02:36 -04:00

func.lua

refactor(lsp): drop once(), use _memoize() #37829

2026-02-12 07:15:20 -05:00

glob.lua

fix(glob): handle numeric literals in pattern matching (#37257)

2026-01-12 10:58:01 -08:00

health.lua

fix(health): show Nvim-owned checks at the top

2026-05-20 14:09:20 +02:00

hl.lua

docs: misc, $NVIM_TERMDEFS

2026-05-18 11:20:18 +02:00

inspect.lua

feat(inspect): update to a8ca312

2026-01-09 10:07:15 +01:00

iter.lua

fix(vim.iter): add richer generic annotations

2026-05-06 16:02:59 +01:00

keymap.lua

fix(lua): drop support for boolean buf in vim.keymap #38432

2026-03-23 08:00:53 -04:00

loader.lua

refactor!: remove deprecated APIs

2026-05-11 16:51:58 +08:00

log.lua

feat(logging): vim.log #38906

2026-05-10 11:03:15 -04:00

lsp.lua

docs: dev, lsp, indent-guides #39756

2026-05-14 13:13:30 -04:00

net.lua

fix(vim.net): unreliable integration tests #39594

2026-05-05 16:26:59 -04:00

pack.lua

fix(pack): collect "Removed plugin" into one message #39840

2026-05-20 06:45:05 -04:00

pos.lua

refactor(pos,range): add missing validators and improve the docs

2026-05-20 16:23:03 +08:00

provider.lua

refactor: create function for deferred loading

2024-02-03 16:53:41 +01:00

range.lua

refactor(pos,range): add missing validators and improve the docs

2026-05-20 16:23:03 +08:00

re.lua

build: set luals checklevel to Hint #32392

2025-02-10 03:04:01 -08:00

secure.lua

fix(vim.secure): read() command injection vulnerability #39918

2026-05-20 15:27:43 -04:00

snippet.lua

fix(snippet): cancel session on <Esc> in Select mode #39238

2026-05-10 09:19:12 -04:00

text.lua

fix(lua): vim.diff is nil in uv.new_work() thread #34909

2025-07-12 20:54:22 -07:00

treesitter.lua

fix(treesitter): drop select() kwargs #39646

2026-05-07 11:14:17 +00:00

tty.lua

docs: misc, $NVIM_TERMDEFS

2026-05-18 11:20:18 +02:00

ui.lua

feat(ui): vim.ui.input(opts.scope) #39570

2026-05-17 11:34:06 -04:00

uri.lua

build(lint): allow "bufnr" as positional param #39515

2026-04-30 07:12:35 -04:00

version.lua

feat(vim.version): add __eq to vim.VersionRange #38881

2026-04-08 13:33:00 -04:00