catch3, branch security/bounded-strings

Merge branch 'devel' into security/bounded-strings

2026-11-15T19:58:40+00:00

Merge pull request #45 from Progmasoft/legal/lgpl

2026-11-15T19:58:26+00:00

License Catch3's Progmasoft files under LGPL-3.0-or-later

Bound three string and XML reads that analysis flagged

2026-11-15T19:29:48+00:00

- On macOS, the path from _NSGetExecutablePath is cut at its first NUL
  found inside the buffer, in place of strlen, which reads until a NUL
  wherever it is.
- The table test measures its C strings with std::string_view.
- The Bazel reporter test reads the JUnit report and rejects a document
  type before parsing it, so no entity, external or internal, is ever
  expanded.

Claude-Session: https://claude.ai/code/session_01Ji7xZMYjc4zankoc7hGBE1

Wrap the license sentence of the README notice at 80 columns

2026-11-15T18:23:13+00:00

Codacy's markdownlint (MD013) found the line that names LGPL-3.0-or-later
in the notice at the top of the README 100 columns long; the notice is
wrapped at 80 like the rest of the file.

Co-Authored-By: Claude Opus 5.5 
Claude-Session: https://claude.ai/code/session_01Ji7xZMYjc4zankoc7hGBE1

Keep the license notice of SECURITY.md beside it

2026-11-15T18:19:30+00:00

The security policy is read by people who report a flaw; its notice is for
tools. Codacy found the notice's acronyms undefined and the address in its
copyright line taken for personal data. The notice moves, unchanged, into
SECURITY.md.license, the sidecar file REUSE defines for this; the policy
starts with its title, and its reporting address stays where it was.
LICENSES/README.md says where the notice is.

Co-Authored-By: Claude Opus 5.5 
Claude-Session: https://claude.ai/code/session_01Ji7xZMYjc4zankoc7hGBE1

Wrap the new license text at 80 columns

2026-11-15T18:12:53+00:00

PATENTS.md and the License section of the README are wrapped at 80
columns, as the rest of Catch3's Markdown is and as Codacy's markdownlint
checks. The three Markdown files that came from Catch2 write their two
copyright lines and the license in one comment, so that no line passes 80.

Co-Authored-By: Claude Opus 5.5 
Claude-Session: https://claude.ai/code/session_01Ji7xZMYjc4zankoc7hGBE1

Merge branch 'devel' into legal/lgpl

2026-11-15T18:09:10+00:00

Merge pull request #46 from Progmasoft/ci/doxygen

2026-11-15T18:07:20+00:00

Build the Doxygen reference in CI and fail on warnings

Cover the Progmasoft-authored code with the Patent Grant 1.1

2026-11-15T17:09:48+00:00

PATENTS.md applies the Progmasoft Patent Grant, Version 1.1, to the
Progmasoft-authored files from 0.5.0 on, with its text in LICENSES/ as
published in Progmasoft/patent-grants. Catch2-originated and vendored files
are not covered. The README and LICENSES/README.md say so; SPDX expressions
name the copyright license alone.

Co-Authored-By: Claude Opus 5.5 
Claude-Session: https://claude.ai/code/session_01Ji7xZMYjc4zankoc7hGBE1

Merge remote-tracking branch 'origin/devel' into legal/lgpl

2026-11-15T17:09:21+00:00