v2026.04.02/scripts
Abdessamad Derraz 5ab82a7898 refactor: security hardening + mame arcade bios updates
Security fixes:
- Zip-slip protection in _extract_zip_to_archive (sanitize paths)
- Hash verification for large file downloads (cache + post-download)
- Sanitize YAML destination fields against path traversal
- Size limit on ZIP entry reads (512MB cap, prevents zip bombs)
- Download size limits in auto_fetch (100MB cap)
- Reject hashless external downloads
- Sanitize filenames in place_file with basename()

MAME arcade updates from Batocera v38 pack:
- Updated naomi, naomi2, naomigd, awbios, airlbios, hod2bios, hikaru
- Old versions preserved in .variants/ for RetroBat compatibility

Batocera 675/680 (+9), all other platforms unchanged at 0 missing
2026-03-17 15:32:14 +01:00
..
scraper refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00
auto_fetch.py refactor: security hardening + mame arcade bios updates 2026-03-17 15:32:14 +01:00
common.py refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00
dedup.py refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00
download.py refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00
download.sh update all references from retroarch_system to retrobios 2026-03-17 11:17:50 +01:00
generate_db.py refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00
generate_pack.py refactor: security hardening + mame arcade bios updates 2026-03-17 15:32:14 +01:00
generate_readme.py refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00
list_platforms.py refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00
migrate.py v2: automated BIOS platform with full pipeline 2026-03-17 10:54:39 +01:00
validate_pr.py refactor: consolidate CI pipeline, remove third-party deps 2026-03-17 12:33:10 +01:00
verify.py refactor: fix code review findings across all scripts 2026-03-17 15:16:51 +01:00