The plugin runs inside the input method and sees everything that is typed, so
what it is built from matters. build.sh used to download a tag archive and a
yoga archive without checking them. It now fetches both by commit hash and
verifies the hash afterwards: a tag can be moved and an archive swapped, a
commit hash cannot be faked. A version without a pinned commit is refused
unless FCITX_COMMIT is given. Archive checksums were not used on purpose, GitHub
does not keep the bytes of generated archives stable.
enable-autostart.sh writes paths into an Exec line and a service file and now
refuses paths that would need quoting there.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
justmeandClaude Sonnet 5.5
9cb4134203