lazarh.work

storytold/filmcraft

FilmCraft Releases v0.11.0 to v0.13.0 Introduce Security Enhancements, New Features, and Platform Adjustments

filmcraft

FilmCraft, an open-source nonlinear video editor written in Rust, has issued three consecutive releases, v0.11.0, v0.12.0, and v0.13.0. These updates bring a range of improvements including security hardening, new video color spaces, timeline and caption editing enhancements, and platform support changes such as dropping FreeBSD aarch64 due to CI limitations.

About FilmCraft

FilmCraft is a professional, open-source nonlinear video editor developed in pure Rust. It aims to provide modern video editing, color grading, and sound editing capabilities. The project is part of the ArtCraft suite, designed for artists, designers, and filmmakers seeking a robust editing toolchain. FilmCraft supports a wide range of video codecs and formats and emphasizes security and reliability in media handling.

Release Highlights

Dropping FreeBSD aarch64 Support in v0.11.0 and v0.12.0

Both the v0.11.0 and v0.12.0 releases note the removal of FreeBSD aarch64 from supported platforms. This decision was driven by continuous integration (CI) constraints, specifically the inability to build this target within the 5-hour CI time limit. While FreeBSD x86_64 and other platforms remain supported, this is a known blocker tracked for future resolution in the project's common actions repository.

v0.11.0: CI Improvements and Usability Fixes

The v0.11.0 release introduced several improvements focused on continuous integration and user experience:

  • Integration of SonarCloud and CodeRabbit badges into the README to improve code quality tracking.
  • Switching to a shared Nix workflow for CI, streamlining build processes.
  • Fixes for macOS behavior to prompt saving on Cmd-Q instead of quitting immediately.
  • Enhancements to auto-save ordering and CLI export commands to improve reliability.
  • Hardening video decoders against hostile input, including AV1 and MPEG-2 codecs, to increase stability.

v0.12.0: Minor Fixes and Continued Platform Support Changes

This release continued the trend of platform support adjustments and minor fixes:

  • Rejection of TTML offset times lacking integer digits to improve caption parsing.
  • Improvements in text-to-speech normalization, including handling of negative currency signs and time expressions.
  • Retention of file URL hosts starting with "localhost" to ensure correct URL handling.

v0.13.0: Major Security Hardening, New Features, and Workflow Enhancements

The most recent and substantial update, v0.13.0, includes a broad set of changes:

  • Security Enhancements: Extensive bounding and validation across codecs, text processing, rendering, exports, and media imports to protect against malformed or hostile input. This includes bounding metadata expansions, frame allocations, and buffer sizes to avoid resource exhaustion and security vulnerabilities.
  • New Color Spaces: Addition of Fujifilm F-Log, F-Log2, and F-Log2 C color spaces (F-Gamut / F-Gamut C), expanding FilmCraft's color grading capabilities.
  • Authentication: Desktop control requests now require session-token authentication, improving control security.
  • Timeline and Caption Editing: New features such as the Razor tool cutting captions, option-drag duplication of captions, and copy/cut/paste support for captions in the timeline.
  • UI and Usability: The timeline clip menu now scrolls when taller than the screen, and the work area bar with settable in/out points was introduced.
  • Media Import: Support for importing animated WebP files as clips.
  • Bug Fixes: Numerous fixes addressing false overlaps in time ranges, pointer event bounds, and export folder sanitization.

Contributions and Community

The v0.13.0 release also highlights contributions from several new contributors, reflecting an active and growing community. These contributors have helped with color space additions, security improvements, UI enhancements, and media handling.

Conclusion

FilmCraft continues to evolve as a secure, feature-rich nonlinear video editor with a focus on professional-grade capabilities and platform support. The recent releases demonstrate a commitment to security hardening, user experience improvements, and expanding editing features. Users on supported platforms can expect a more robust and versatile editing environment, while the project maintains transparency about platform limitations and ongoing development challenges.

For more detailed changelogs and updates, visit the FilmCraft GitHub releases page.

Sources