Skip to content

SheetMog

vsdk-v0.8.0 scope: sdk Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

rust spreadsheet spreadsheet-engine typescript xlsx

Summary

AI summary

Updates 🔒 Public-repo hardening, Doughnut, and API across a mixed release.

Full changelog

This release promotes the v0.7.2 development line (467 commits) to a public SDK release. The headline is a near-complete rebuild of the charting system, alongside major XLSX import fidelity work, a range of editing/interaction fixes, and public-repo hardening.

Primary PR: #11 — Release v0.7.2: charting system rebuild, XLSX import fidelity, public-repo hardening

📊 Charts — rebuilt from a broken baseline

Charting was effectively non-functional prior to this line; this is a ground-up rebuild of import, layout, and rendering:

  • Combo charts: working value axes and dual-axis handling
  • Doughnut: correct label and slice alignment
  • Stacked areas: correct legend colors
  • Axis handling: title placement at crossings, value-axis domain precedence
  • Imported charts: aligned clustered-bar slots, correct single-series category semantics, preserved entry-driven legends
  • API: charts.update no longer drops series updates

📥 XLSX / OOXML import durability

  • Durable cell identity for floating-object anchors; per-sheet floating-object order persisted
  • Deferred hydration for data-table regions, with viewport refresh and barrier promotion
  • Active-sheet persistence deferred until import durability settles
  • Fixed OOXML type-declaration emit boundary

🖱️ Editing & interaction fixes

  • Editing of dynamic-array spill members
  • Pivot: relocate output on cut-paste; imported layout reflected in field-panel wells
  • Active cell kept at deletion index after row/column delete
  • Cross-sheet clipboard paste routed through engine copy_range; paste values across sheets
  • Threaded comments via right-click New Comment; fixed infinite recursion in comment normalization
  • Content-aware responsive ribbon collapse (fixes Formulas tab clipping)
  • Corrected Home keytips and Increase/Decrease Decimal stepping on General-format cells

🔒 Public-repo hardening

  • Added a private-leak gate and scrubbed test fixtures / corpus provenance
  • Refreshed contributing guidance and docs; applied rustfmt + prettier across the tree

Full Changelog: https://github.com/fundamental-research-labs/mog/compare/sdk-v0.7.1...sdk-v0.8.0

Security Fixes

  • Public-repo hardening: added private-leak gate and scrubbed test fixtures/corpus provenance

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track SheetMog

Get notified when new releases ship.

Sign up free

About SheetMog

All releases →

Related context

Beta — feedback welcome: [email protected]