wallpaper.rs/pywal.rs/theme.rs each shelled out via a bare
Command::new(...).status() with no timeout — a wedged awww-daemon, pywal
choking on a corrupt/huge image, or a hung bread-theme reload could each
block breadpaper indefinitely. Switched to bread_utils::proc::run (path
dependency for now, see the TODO in Cargo.toml), matching the exact
"anything shelling out to awww" case named in tonight's ecosystem-utils
audit.
- README.md existed only in the working tree and was never committed,
so the published repo/release tarball shipped with no documentation
at all. Verified its usage/install instructions against the current
code before committing; corrected the stated Rust requirement from
1.80+ to 1.85+ (edition 2024 needs 1.85+).
- Cargo.toml: 0.1.0 -> 0.1.10, matching the latest tag (v0.1.10).
breadpaper --version previously reported nine releases behind the
actual release history.
actions/checkout uses GITHUB_SERVER_URL=http://localhost:3002 which is
unreachable from inside the Docker container. Use the public Forgejo URL
directly, matching the pattern used by package.yml.
release.yml moves from .github/ to .forgejo/ so it runs directly on
the hestia runner without needing the GitHub mirror. GitHub upload step
dropped; bakery uses dl.breadway.dev as primary. LICENSE added to fix
PKGBUILD package() failure.
CLI tool that sets a wallpaper with awww, generates a pywal colour
palette, and reloads bread-theme to recolour all running bread GTK apps.
Includes CI workflows, bakery metadata, and Arch PKGBUILD.