[ghosthack]

Fixes from a full review of docview 0.2.0. Each code fix has a regression test that fails without it; ./mvnw verify passes.

Safety and correctness

• Wide HTML tables could exhaust memory. Every row was padded to the widest row with no column cap, so a ~1 MB table ran out of a 2 GB heap. HTML tables are now capped at 128 columns (the Markdown limit), and cells past the cap merge into the last column without losing text.
• One caller could break a shared cache build. BackgroundCache gave the same in-flight future to every request/prefetch caller, so one cancel() or orTimeout() broke all of them. Each caller now gets its own future.
• Highlight budgets counted the wrong time. The budgets included grammar compilation and waiting on other documents, and one TextMate call could run about 1 s past the per-document budget.
  • HighlightSession gains a default tokensForLine(line, maxNanos, spent). The budget passes its remaining time, and TextMate reports regex search time only.
  • LineDeadline no longer double-counts a finished search, and it keeps thread interrupts that Joni cleared.

Views

• Scroll memory saved the wrong position. Showing two documents before a layout pass saved the outgoing document with the previous document's row. Both views now remember the row they scrolled to until the next layout.
• Scroll keys swallowed app shortcuts. Ctrl/Alt/Meta/Cmd + arrows, J/K, Home/End and Page keys now reach the application. The same goes for Ctrl+Space in XmlTreeView.

Markdown and HTML display

• Numbered lists: WebView ordered lists honour their first number (start=).
• Horizontal rules: spaced rules (* * *, - - -, _ _ _) are now recognized.
• Contents tree: heading text now comes from the renderer, so it matches the page.
• <object>/<applet>: the tags are dropped and their fallback content is shown, so an unclosed one no longer hides the rest of the document.
  • Behaviour change: content inside a closed <object> now appears too. The README's Safety section says so.

Release, CI and licensing

• Release workflow: jobs check out github.sha instead of the tag name, validate fails if the tag has moved, and the dry run is limited to main. The dry run now also checks that every bundle artifact is signed, and the help/versions plugins are pinned.
• CI: the macOS job moves from macos-14 to macos-15. On macos-14 the job was cancelled before any runner was assigned, twice.
• Licence notices: the textmate jar now ships the MIT notices for each bundled grammar upstream (grammars/THIRD-PARTY-NOTICES.txt) and for the code TM4E was translated from (META-INF/licenses/tm4e/NOTICE-MIT.txt).

Known limits

• Cold-start highlighting: on a grammar's first line, regex search runs slowly before the JIT warms up, and that time still counts toward the budget.
• Minor Markdown gaps not fixed here: backslash escapes, Total | + --- parsing as a table, mis-nested **a _b** c_, and CDATA script text shown escaped.

🤖 Generated with Claude Code

https://claude.ai/code/session_01VwoQ7jw5qzPPePBj6NEpaS