v0.7.6

[bwp91]

• fix(handshake): correct Windows platform detection regex
• fix(handshake): surface server's auth rejection reason
• fix(introspect): clone object before mutating during sub-path recursion
• fix(introspect): include first sub-node in introspection results
• fix(stdifaces): aggregate exported children using loop variable
• fix(stdifaces): write the value supplied by the caller in Properties.Set
• fix(bus): typo in emit-undefined-signal error message
• fix(bus): forward opts when bus() is called without new
• fix(bus): drop double serial increment after signal emit
• fix(bus): expose error body string as err.message
• fix(bus): reply with UnknownInterface when interface missing on expor…
• fix(bus): handle void method returns and missing result signatures
• fix(bus): treat returned Error as a D-Bus error reply
• fix(server-handshake): drop debug console.log spam
• fix(put): correct floatle encoding and remove debug logs
• fix(index): include arg0 in unixexec arguments
• fix(message): honor message endianness on receive
• fix(dbus2js): align xml2js config with introspect.js
• fix(address-x11): lazy-load x11 with clear error and document as opti…
• fix(bus): only wrap obj.emit once per object across re-exports
• fix(portforward): move top-level side-effect script out of lib/
• chore(security): create exported-object maps with null prototype
• chore(examples): load jQuery over HTTPS in dbusproxy demo
• chore(ci): set least-privilege permissions on Node Test workflow
• chore(ci): bump release workflow action versions
• chore: dependency updates

[Copilot]

Pull request overview

Release-focused PR (“v0.7.6”) that bundles a set of bug fixes and hardening improvements across handshake/auth, message parsing, bus behavior, introspection tooling, and CI.

Changes:

• Fixes core protocol handling (message endianness, handshake behavior/errors, property setting, void returns, UnknownInterface, Error returns).
• Hardens exported object maps against prototype pollution and removes debug logging / console spam.
• Updates tooling/workflows and adds regression tests + fixtures covering the fixed behaviors.

Reviewed changes

Copilot reviewed 35 out of 38 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
test/test_security_proto_pollution.js	Adds regression coverage for null-prototype exported object maps.
test/test_introspect.js	Extends introspection fixture coverage to include sub-nodes and validates returned node list.
test/test_fix_stdifaces_set.js	Regression test ensuring Properties.Set writes caller-provided variant value.
test/test_fix_stdifaces_children.js	Regression tests for introspection XML including exported child sub-paths.
test/test_fix_server_handshake_quiet.js	Ensures server handshake no longer logs to console during normal operation.
test/test_fix_put_floatle.js	Ensures Put.floatle matches Buffer IEEE754 encoding and offset handling.
test/test_fix_message_endianness.js	Validates DBusBuffer endianness wiring and message parser endianness propagation.
test/test_fix_introspect_parse_error.js	Ensures XML parse errors surface via callback (no uncaught throws).
test/test_fix_introspect_clone.js	Ensures introspection recursion clones objects rather than mutating caller input.
test/test_fix_handshake_windows.js	Guards Windows platform detection regex behavior.
test/test_fix_handshake_auth_reject.js	Ensures auth rejection reason is surfaced as an Error message.
test/test_fix_bus_void_return.js	Ensures void/empty-signature methods don’t marshal undefined into replies.
test/test_fix_bus_unknown_interface.js	Ensures UnknownInterface error is returned when interface missing on an exported path.
test/test_fix_bus_serial.js	Ensures signal emission increments serial exactly once per signal.
test/test_fix_bus_error_return.js	Ensures returning an Error produces a D-Bus error reply (including dbusName override).
test/test_fix_bus_error_message.js	Ensures error replies expose err.message as a string and preserve full body as err.body.
test/test_fix_bus_emit_wrap_once.js	Ensures emit wrapper is applied once across re-exports and doesn’t duplicate dispatch.
test/test_fix_bus_emit_typo.js	Ensures emit-without-name throws “undefined signal” (typo regression).
test/test_fix_address_x11.js	Ensures address-x11 lazy-load behavior and actionable error when x11 isn’t installed.
test/fixtures/introspection/with-subnodes.xml	Adds fixture XML containing child nodes.
test/fixtures/introspection/with-subnodes.json	Adds expected JSON for sub-node introspection fixture.
package.json	Adds x11 as documented optional dep and bumps dev tooling versions.
package-lock.json	Updates lockfile to reflect dependency/tooling upgrades.
lib/stdifaces.js	Fixes child aggregation in introspection and corrects Properties.Set behavior.
lib/server-handshake.js	Removes console logging during server handshake.
lib/put.js	Fixes float little-endian encoding via Buffer.writeFloatLE.
lib/message.js	Fixes parsing by honoring endianness flag for header/body and DBusBuffer usage.
lib/introspect.js	Fixes error propagation, object cloning during recursion, and sub-node inclusion.
lib/handshake.js	Fixes Windows platform detection and surfaces REJECTED reason as Error.
lib/dbus-buffer.js	Adds endianness-aware reads and correct 64-bit word ordering for BE.
lib/bus.js	Fixes option forwarding, exportedObjects hardening, serial increment, UnknownInterface, void returns, Error returns, and wraps emit once.
lib/address-x11.js	Lazy-loads optional x11 dependency with clear install guidance.
index.js	Includes arg0 in unixexec argument collection.
examples/portforward.js	Moves portforward example out of lib/ to avoid side effects.
examples/dbusproxy/index.html	Switches jQuery load to HTTPS.
bin/dbus2js.js	Aligns xml2js parsing assumptions with introspection output structure.
.github/workflows/run-test.yml	Sets least-privilege workflow permissions.
.github/workflows/release.yml	Bumps action versions used in release workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 35 out of 38 changed files in this pull request and generated 3 comments.