amitwh b2ad8b8326 fix(security): address supply-chain + resource-leak findings ...

- PdfFontHeader: use mkdtempSync for exclusive temp dir; caller unlinks
  after pandoc consumes (cleanup wired into exportWithPandoc callback)
- download-tools: pin FiraCode to immutable release v6.2 with SHA-256
  digests verified before atomic rename; refuse download on mismatch
- Vendor missing FiraCode-Bold.ttf + JetBrainsMono-Regular.ttf

2026-07-23 09:34:57 +05:30

..

DocxFontEmbedder.test.js

feat(monospace): embed TTF into pandoc-generated DOCX

2026-07-23 09:34:57 +05:30

EpubFontEmbedder.test.js

feat(monospace): EPUB embed-font helper + manifest patcher

2026-07-23 09:34:57 +05:30

ExportCss.test.js

feat(monospace): build CSS with embedded woff2 base64

2026-07-23 09:34:57 +05:30

monospace-handlers.test.js

feat(monospace): add get/set IPC handlers with safe validation

2026-07-23 09:34:57 +05:30

MonospaceFontConfig.test.js

feat(monospace): add path resolver for bundled TTF assets

2026-07-23 09:34:57 +05:30

monospaceSettings.test.js

feat(monospace): add settings schema with safe defaults

2026-07-23 09:34:57 +05:30

PdfFontHeader.test.js

fix(security): address supply-chain + resource-leak findings

2026-07-23 09:34:57 +05:30