chore: bump version to 1.2.39

[18202781743]

update changelog to 1.2.39

Summary by Sourcery

Chores:

• Refresh Debian changelog entries to reflect version 1.2.39.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Updates the Debian packaging changelog to reflect a new release version 1.2.39.

File-Level Changes

Change	Details	Files
Update Debian changelog entry for new release version 1.2.39.	Adjust the top changelog stanza to reference version 1.2.39. Ensure the changelog formatting remains compliant with Debian standards (header, distribution, urgency, maintainer, and date).	debian/changelog

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[github-actions]

TAG Bot

TAG: 1.2.39
EXISTED: no
DISTRIBUTION: unstable

[sourcery-ai]

Hey there - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[deepin-ci-robot]

deepin pr auto review

我来帮你审查这个 changelog 的变更内容。这是一个 Debian 软件包的变更日志，主要记录了版本 1.2.39 的新增功能和修复内容。以下是我的详细分析：

1. 格式规范分析：

• changelog 格式基本符合 Debian 标准，包含版本号、发行版和紧急程度
• 作者信息和时间戳格式正确
• 使用了正确的缩进（两个空格）
• 条目之间用空行分隔

2. 内容审查：

a) "feat: api for run non-app commands"

• 新增了运行非应用程序命令的 API
• 建议补充更详细的 API 文档说明
• 需要确保新 API 的安全性，避免命令注入风险

b) "docs: add package manager hook documentation and security fixes"

• 增加了包管理器钩子的文档
• 包含了安全修复
• 建议在文档中详细说明安全修复的具体内容
• 应该说明这些安全修复的影响范围

c) "fix: avoid wordexp escape two dollar sign in file name"

• 修复了文件名中双美元符号的转义问题
• 这是一个重要的安全修复，因为不当的转义可能导致命令注入
• 建议补充测试用例来验证修复效果

3. 安全性建议：

• 对于新增的 API，建议：
  • 添加输入验证
  • 实现适当的权限检查
  • 添加详细的错误处理
  • 考虑添加速率限制

4. 改进建议：

• 版本号 1.2.39 中的日期（2025年12月11日）似乎有误，建议修正为实际日期
• 可以考虑在 changelog 中添加更多的技术细节，特别是对于安全修复
• 建议为每个变更添加相关的 bug 编号或 issue 链接（如果有的话）

5. 文档完整性：

• 建议确保新增的 API 文档包含：
  • 使用示例
  • 参数说明
  • 返回值描述
  • 错误处理说明
  • 安全注意事项

总体来说，这个 changelog 记录了重要的功能更新和安全修复，但可以在文档完整性和安全性细节方面做进一步改进。建议在后续版本中持续关注安全性问题，并保持文档的及时更新。

[fly602]

/forcemerge

[deepin-bot]

This pr force merged! (status: blocked)

[deepin-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: 18202781743, fly602

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• debian/deepin/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment