[pull] master from microsoft:master

Tools/SandboxTest.ps1

@@ -23,6 +23,7 @@ param(
     [Parameter(HelpMessage = 'The folder to map in the Sandbox.')]
     [ValidateScript({
             if (-not (Test-Path -Path $_ -PathType Container)) { throw "$_ is not a folder." }
+            if ($_ -match '[''"<>&]') { throw "MapFolder path contains forbidden characters (' `" < > &): $_" }
             return $true
         })]
     [String] $MapFolder = $pwd,
@@ -31,6 +32,41 @@ param(
     [string] $WinGetVersion,
     # WinGetOptions
     [Parameter(HelpMessage = 'Additional options for WinGet')]
+    [ValidateScript({
+            # Parse allowed flags only from flag definition lines in winget install --help
+            # These lines start with whitespace followed by a dash (e.g., "  -h,--silent  ...")
+            if (-not (Get-Command 'winget.exe' -ErrorAction SilentlyContinue)) {
+                Write-Warning 'WinGet is not installed on the host. Skipping WinGetOptions validation.'
+                return $true
+            }
+            $helpLines = winget install --help 2>&1 | Where-Object { $_ -match '^\s+-' }
+            $allowedFlags = @()
+            foreach ($line in $helpLines) {
+                # Extract the flag portion before the description (everything up to two consecutive spaces)
+                $flagPart = ($line.Trim() -split '\s{2,}')[0]
+                $parsedTokens = $flagPart -split ',' | ForEach-Object { $_.Trim() }
+                Write-Debug "WinGetOptions: Parsed line '$($line.Trim())' -> flags: $($parsedTokens -join ', ')"
+                $allowedFlags += $parsedTokens
+            }
+            $allowedFlags = $allowedFlags | Where-Object { $_ } | Select-Object -Unique
+            if (-not $allowedFlags) {
+                throw 'Could not parse winget install flags from --help output. Ensure winget is installed.'
+            }
+            Write-Debug "WinGetOptions: Allow-list ($($allowedFlags.Count) flags): $($allowedFlags -join ', ')"
+            $tokens = $_ -split '\s+'
+            foreach ($token in $tokens) {
+                if ($token.StartsWith('-')) {
+                    $isAllowed = $token -in $allowedFlags
+                    Write-Debug "WinGetOptions: Checking token '$token' -> $(if ($isAllowed) { 'ALLOWED' } else { 'BLOCKED' })"
+                    if (-not $isAllowed) {
+                        throw "WinGetOptions contains disallowed flag: $token. Allowed flags: $($allowedFlags -join ', ')"
+                    }
+                } else {
+                    Write-Debug "WinGetOptions: Skipping value token '$token'"
+                }
+            }
+            return $true
+        })]
     [string] $WinGetOptions,
     # Switches
     [switch] $SkipManifestValidation,
@@ -872,19 +908,23 @@ Pop-Location
 # Create the WSB file
 # Although this could be done using the native XML processor, it's easier to just write the content directly as a string
 Write-Verbose 'Creating WSB file for launching the sandbox'
+$escapedTestDataFolder = [System.Security.SecurityElement]::Escape($script:TestDataFolder)
+$escapedPrimaryMappedFolder = [System.Security.SecurityElement]::Escape($script:PrimaryMappedFolder)
+$escapedSandboxWorkingDirectory = [System.Security.SecurityElement]::Escape($script:SandboxWorkingDirectory)
+$escapedSandboxBootstrapFile = [System.Security.SecurityElement]::Escape($script:SandboxBootstrapFile)
 @"
 <Configuration>
   <Networking>Enable</Networking>
   <MappedFolders>
     <MappedFolder>
-      <HostFolder>$($script:TestDataFolder)</HostFolder>
+      <HostFolder>$($escapedTestDataFolder)</HostFolder>
     </MappedFolder>
     <MappedFolder>
-      <HostFolder>$($script:PrimaryMappedFolder)</HostFolder>
+      <HostFolder>$($escapedPrimaryMappedFolder)</HostFolder>
     </MappedFolder>
   </MappedFolders>
   <LogonCommand>
-  <Command>PowerShell Start-Process PowerShell -WindowStyle Maximized -WorkingDirectory '$($script:SandboxWorkingDirectory)' -ArgumentList '-ExecutionPolicy Bypass -NoExit -NoLogo -File $($script:SandboxBootstrapFile)'</Command>
+  <Command>PowerShell Start-Process PowerShell -WindowStyle Maximized -WorkingDirectory '$($escapedSandboxWorkingDirectory)' -ArgumentList '-ExecutionPolicy Bypass -NoExit -NoLogo -File $($escapedSandboxBootstrapFile)'</Command>
   </LogonCommand>
   <AudioInput>Disable</AudioInput>
   <VideoInput>Disable</VideoInput>

manifests/a/AmN/yasb/2.0.4/AmN.yasb.installer.yaml

@@ -0,0 +1,27 @@
+# Created using wingetcreate 1.12.8.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AmN.yasb
+PackageVersion: 2.0.4
+InstallerLocale: en-US
+InstallerType: msi
+Installers:
+- Architecture: x64
+  InstallerUrl: https://github.com/amnweb/yasb/releases/download/v2.0.4/yasb-2.0.4-x64.msi
+  InstallerSha256: 85E41D377E994F37EEB2CFCB38943BCC0204CC10F85822EAF0856FF903359345
+  ProductCode: '{0524DE13-FAAF-4DF5-BEE3-A13A479EEA97}'
+  AppsAndFeaturesEntries:
+  - DisplayName: YASB Reborn
+    ProductCode: '{0524DE13-FAAF-4DF5-BEE3-A13A479EEA97}'
+    UpgradeCode: '{3F620CF5-07B5-47FD-8E37-9CA8AD14B608}'
+- Architecture: arm64
+  InstallerUrl: https://github.com/amnweb/yasb/releases/download/v2.0.4/yasb-2.0.4-aarch64.msi
+  InstallerSha256: 5583F0355BEC890DB5CDE5285B92BB50A094B47B2EF3ECD76F031507579540A1
+  ProductCode: '{A370D0AA-AFD0-4E45-AFB8-E8D912EF93B9}'
+  AppsAndFeaturesEntries:
+  - DisplayName: YASB Reborn
+    ProductCode: '{A370D0AA-AFD0-4E45-AFB8-E8D912EF93B9}'
+    UpgradeCode: '{3F620CF5-07B5-47FD-8E37-9CA8AD14B608}'
+ManifestType: installer
+ManifestVersion: 1.12.0
+ReleaseDate: 2026-06-15

manifests/a/AmN/yasb/2.0.4/AmN.yasb.locale.en-US.yaml

@@ -0,0 +1,28 @@
+# Created using wingetcreate 1.12.8.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: AmN.yasb
+PackageVersion: 2.0.4
+PackageLocale: en-US
+Publisher: AmN
+PublisherUrl: https://github.com/amnweb
+PublisherSupportUrl: https://github.com/amnweb/yasb/issues
+Author: AmN
+PackageName: yasb
+PackageUrl: https://github.com/amnweb/yasb
+License: MIT License
+LicenseUrl: https://github.com/amnweb/yasb/blob/HEAD/LICENSE
+Copyright: Copyright 2024 AmN. All rights reserved.
+CopyrightUrl: https://github.com/amnweb/yasb/blob/main/LICENSE
+ShortDescription: A configurable Windows status bar.
+Description: A configurable Windows status bar.
+Tags:
+- status bar
+- topbar
+ReleaseNotesUrl: https://github.com/amnweb/yasb/releases/tag/v2.0.4
+InstallationNotes: https://github.com/amnweb/yasb
+Documentations:
+- DocumentLabel: Wiki
+  DocumentUrl: https://github.com/amnweb/yasb/wiki
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0

manifests/a/AmN/yasb/2.0.4/AmN.yasb.yaml

@@ -0,0 +1,8 @@
+# Created using wingetcreate 1.12.8.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+
+PackageIdentifier: AmN.yasb
+PackageVersion: 2.0.4
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0

manifests/a/AntonioOrionus/Arroxy/0.4.0/AntonioOrionus.Arroxy.installer.yaml

@@ -0,0 +1,24 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AntonioOrionus.Arroxy
+PackageVersion: 0.4.0
+InstallerLocale: en-US
+InstallerType: nullsoft
+Scope: user
+InstallModes:
+- interactive
+- silent
+- silentWithProgress
+UpgradeBehavior: install
+ProductCode: 676f1cb1-b4d3-53ac-88ee-2c2f796d54e2
+ReleaseDate: 2026-06-15
+AppsAndFeaturesEntries:
+- DisplayName: Arroxy 0.4.0
+  ProductCode: 676f1cb1-b4d3-53ac-88ee-2c2f796d54e2
+Installers:
+- Architecture: x64
+  InstallerUrl: https://github.com/antonio-orionus/Arroxy/releases/download/v0.4.0/Arroxy-win-x64-Setup.exe
+  InstallerSha256: 23208A5A52ED311CCCD8E8B1E7403F85BA7597F23EBCD145ACDBF039BE970AA1
+ManifestType: installer
+ManifestVersion: 1.12.0

manifests/a/AntonioOrionus/Arroxy/0.4.0/AntonioOrionus.Arroxy.locale.en-US.yaml

@@ -0,0 +1,104 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: AntonioOrionus.Arroxy
+PackageVersion: 0.4.0
+PackageLocale: en-US
+Publisher: Antonio Orionus
+PublisherUrl: https://github.com/antonio-orionus
+PublisherSupportUrl: https://github.com/antonio-orionus/Arroxy/issues
+Author: Antonio Orionus
+PackageName: Arroxy
+PackageUrl: https://github.com/antonio-orionus/Arroxy
+License: MIT
+LicenseUrl: https://github.com/antonio-orionus/Arroxy/blob/HEAD/LICENSE
+Copyright: Copyright © 2026 Antonio Orionus
+ShortDescription: Free open-source YouTube downloader GUI based on yt-dlp for Windows, macOS, and Linux. Download videos, Shorts, 4K, 1080p60, HDR, and subtitles with no ads, tracking, cookies, or login. Supports 9 languages.
+Description: Arroxy is a free, open-source desktop app for downloading YouTube videos and Shorts in up to 4K, 1080p60, HDR, and audio-only formats with no ads, tracking, or login required.
+Moniker: arroxy
+Tags:
+- audio-downloader
+- cross-platform
+- desktop-app
+- downloader-for-youtube
+- media-downloader
+- mp4-downloader
+- video-download
+- video-download-tool
+- video-downloader
+- youtube-4k-downloader
+- youtube-download
+- youtube-downloader
+- youtube-shorts-download
+- yt-dlp
+- yt-dlp-gui
+ReleaseNotes: |-
+  Install
+  Windows Setup Windows Portable
+  macOS Apple Silicon macOS Intel
+  Linux AppImage Linux Flatpak Linux tar.gz
+  SHA256
+  The 0.4.0 stable release brings together everything from the 0.4.0 beta line: a full download-profile system, smarter audio handling, a more reliable binary runtime, stronger download recovery, and a broad UI and localization pass.
+  Highlights
+  Faster Download Workflows
+  Arroxy now has a download-profile system that drives quick downloads, bulk runs, and playlist submissions from one place.
+  - The home screen ships with built-in profiles for best available, 4K, QHD, 1080p, 720p, 480p, Smart TV MP4 variants, and audio-only downloads.
+  - Profiles can carry media targets, subtitles, SponsorBlock settings, embed settings, output folder rules, and per-profile subfolders. Built-in profiles can be customized and your own profiles can be added.
+  - Quick Download shows probe/queue progress, supports cancellation and retry, can retry with configured cookies, and reports partial success for bulk runs.
+  - URL intent detection distinguishes single videos, playlists, channels, search URLs, and mixed links before choosing whether to probe, prompt, or open review, and playlist-cap handling opens review when the whole playlist cannot be queued safely.
+  - Bulk URL parsing cleans links, filters obvious non-media files, deduplicates entries, and previews accepted/rejected rows for large paste sessions.
+  Smarter Audio Selection
+  Audio handling now favors the source's own tracks and surfaces clearer quality information.
+  - A new preference chooses between compatible audio and surround-first native audio, and it stays consistent from probing through presets, profiles, playlists, and quick downloads.
+  - Arroxy now prefers the source default or original audio track when available, and keeps Dolby/DRC tracks out of the default compatible path unless you opt into the surround preference.
+  - The audio format picker shows language, quality tier (high/medium/low badges with tooltips), and format details so multi-track videos are easier to choose from.
+  Release Notes In The App
+  - A What's New dialog reads the current version's changelog after an update and remembers the last version it showed, so release details no longer live only on GitHub.
+  Runtime And Binary Reliability
+  The app now relies on signed runtime metadata and Electron's bundled Node runtime instead of resolving "latest" binaries at runtime.
+  - yt-dlp JavaScript challenges run through Electron's bundled Node runtime, so Arroxy no longer needs Deno or a system Node install for extractor JavaScript.
+  - Runtime-managed binaries resolve from signed manifest entries verified with a bundled Ed25519 key, cached as last-known-good and backed by a bundled fallback index, served from a dedicated runtime-binaries release feed.
+  - Materialization verifies size and SHA-256, uses content-addressed cache directories, guards ZIP extraction, and probes only after a real executable exists.
+  - Packaged runtime smoke checks verify managed yt-dlp, Electron Node, and bundled extractor JS before normal startup, and dependency diagnostics carry clearer attempt/failure records for yt-dlp, ffmpeg, and ffprobe.
+  Download Reliability And Recovery
+  - Media retries can preserve temp data for resumable network, rate-limit, chunk-transfer, disk-space, and postprocess failures when usable media evidence exists, and retry/restart paths validate or clean up preserved temp directories.
+  - Progress parsing and HLS normalization no longer show misleading completed progress before a queue item is actually done.
+  - yt-dlp errors flow through a published error taxonomy with localized guidance, including first-class DRM-protected, login-required, and missing-dependency failures.
+  UI, Feedback, And Localization
+  - The home surface, profile picker, profile editor, queue drawer, review step, wizard navigation, warmup splash, and footer were refined for denser everyday use.
+  - An adaptive backdrop adds dark/light scenes with WebGL, Canvas2D, and CSS fallbacks, plus a theme-matched native startup background to reduce launch flash.
+  - Feedback opens through Tally with a hidden state snapshot and, after explicit submission, can upload a gzipped, redacted tail of the log to the feedback service. Discord community links were added to the README, footer, and About dialog.
+  - App copy now flows through a gettext-backed translation workflow with generated runtime locale JSON across all supported languages.
+  Tooling And Tests
+  - Formatting and linting moved to Biome and Oxlint, and bun run check now gates formatting, linting, tooling contract, typecheck, dependency hygiene, dead-code, circular imports, and package publish checks.
+  - Fixture Product E2E now owns real Electron/IPC/yt-dlp workflows against deterministic fixture media, separating acceptance tests from cheaper unit/renderer checks.
+  What's Changed
+  - Refactor test architecture ownership by @antonio-orionus in #66
+  - Add universal download profiles by @antonio-orionus in #68
+  - Clarify profile compatibility labels by @antonio-orionus in #70
+  - Refine renderer UI with shadcn components by @antonio-orionus in #71
+  - Switch lint and format tooling to Biome and Oxlint by @antonio-orionus in #69
+  - build(deps): bump @url-sanitize/clearurls from 0.1.2 to 1.0.0 by @dependabot[bot] in #74
+  - build(deps-dev): bump the development group across 1 directory with 6 updates by @dependabot[bot] in #76
+  - build(deps): bump @url-sanitize/core from 0.1.2 to 1.0.0 by @dependabot[bot] in #75
+  - Add Tally feedback diagnostic uploads by @antonio-orionus in #80
+  - Polish download profiles home by @antonio-orionus in #81
+  - Clean up React Doctor diagnostics by @antonio-orionus in #82
+  - Add design docs and local artifact ignores by @antonio-orionus in #83
+  - Add gettext-backed i18n workflow by @antonio-orionus in #85
+  - Add adaptive backdrop and refactor wizard state by @antonio-orionus in #87
+  - Polish UI density and profile selection by @antonio-orionus in #88
+  - Clean up presets and startup polish by @antonio-orionus in #89
+  - Add resumable retries and quick download progress by @antonio-orionus in #90
+  - Add Discord community links by @antonio-orionus in #92
+  - Improve managed binary setup and download UX by @antonio-orionus in #96
+  - Update outdated dependencies by @antonio-orionus in #95
+  - Simplify playlist cap handling by @antonio-orionus in #97
+  - Replace Deno yt-dlp runtime with Electron Node by @antonio-orionus in #98
+  - Migrate yt-dlp packages and release tooling to Bun by @antonio-orionus in #99
+  - Add native audio controls and release UX by @antonio-orionus in #107
+  - Add source-preferred audio track handling by @antonio-orionus in #108
+  Full Changelog: v0.3.13...v0.4.0
+ReleaseNotesUrl: https://github.com/antonio-orionus/Arroxy/releases/tag/v0.4.0
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0

manifests/a/AntonioOrionus/Arroxy/0.4.0/AntonioOrionus.Arroxy.yaml

@@ -0,0 +1,8 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+
+PackageIdentifier: AntonioOrionus.Arroxy
+PackageVersion: 0.4.0
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0

manifests/a/AppByTroye/KoodoReader/2.3.7/AppByTroye.KoodoReader.installer.yaml

@@ -0,0 +1,48 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AppByTroye.KoodoReader
+PackageVersion: 2.3.7
+InstallerType: nullsoft
+InstallerSwitches:
+  Upgrade: --updated
+FileExtensions:
+- azw
+- azw3
+- cb7
+- cbr
+- cbt
+- cbz
+- epub
+- fb2
+- mobi
+- pdf
+ProductCode: 233610fa-2bda-5a09-a37b-75e0bafa7920
+ReleaseDate: 2026-06-15
+Installers:
+- Architecture: x64
+  Scope: user
+  InstallerUrl: https://dl.koodoreader.com/v2.3.7/Koodo-Reader-2.3.7-x64.exe
+  InstallerSha256: 4FADFE6DD441E77F758943230A293914DAD185D0A71C153AD46995B11883BBE6
+  InstallerSwitches:
+    Custom: /currentuser
+- Architecture: x64
+  Scope: machine
+  InstallerUrl: https://dl.koodoreader.com/v2.3.7/Koodo-Reader-2.3.7-x64.exe
+  InstallerSha256: 4FADFE6DD441E77F758943230A293914DAD185D0A71C153AD46995B11883BBE6
+  InstallerSwitches:
+    Custom: /allusers
+- Architecture: arm64
+  Scope: user
+  InstallerUrl: https://dl.koodoreader.com/v2.3.7/Koodo-Reader-2.3.7-arm64.exe
+  InstallerSha256: 6C755D23957A990E6C003C9EB54D3EE705BBC34928958F658DD0CD8AEBB572AC
+  InstallerSwitches:
+    Custom: /currentuser
+- Architecture: arm64
+  Scope: machine
+  InstallerUrl: https://dl.koodoreader.com/v2.3.7/Koodo-Reader-2.3.7-arm64.exe
+  InstallerSha256: 6C755D23957A990E6C003C9EB54D3EE705BBC34928958F658DD0CD8AEBB572AC
+  InstallerSwitches:
+    Custom: /allusers
+ManifestType: installer
+ManifestVersion: 1.12.0