Bernardo Magri dc9e74ca12 fix(scripts): use mktemp for state.json writes, not a fixed /tmp path ...

Ten state-mutating sites across seven scripts wrote through a predictable,
world-writable temp path (`/tmp/state.json`, `/tmp/system-state.json`)
before the atomic `sudo mv`. Because the `>` redirect runs as the invoking
user (sudo doesn't cover redirects), the shared fixed path is a symlink/
TOCTOU target and collides if two of these run concurrently. Switch each
to a per-invocation `mktemp`; the atomic rename into place is unchanged.
nomarchy-theme-set already used a temp var for its home-state write — this
makes its system-state write consistent and cleans the temp up on failure.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-05-30 21:05:04 +01:00

..

nomarchy-font-current

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-font-list

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-font-set

fix(qa): comprehensive out-of-the-box audit and repair

2026-05-01 20:03:04 +01:00

nomarchy-show-done

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-show-logo

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-bg-install

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-bg-next

fix(theme): align nomarchy-theme-bg-next default with the schema

2026-05-21 21:07:00 +01:00

nomarchy-theme-bg-set

fix(theme): exit on missing theme; persist bg picks across rebuilds

2026-05-21 20:35:52 +01:00

nomarchy-theme-current

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-install

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-list

fix(theme): set default to summer-night and fix scripts on live ISO

2026-05-18 21:22:39 +01:00

nomarchy-theme-next

fix(audit): close all missing-references rows in script audit

2026-05-18 16:58:54 +01:00

nomarchy-theme-refresh

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-remove

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-set

fix(scripts): use mktemp for state.json writes, not a fixed /tmp path

2026-05-30 21:05:04 +01:00

nomarchy-theme-set-keyboard

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-set-keyboard-asus-rog

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-set-keyboard-f16

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-set-obsidian

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-theme-set-templates

fix(theme): set default to summer-night and fix scripts on live ISO

2026-05-18 21:22:39 +01:00

nomarchy-theme-update

chore: add 'set -e' to every nomarchy-* bash script that lacks it

2026-04-30 20:50:13 +01:00

nomarchy-themes-prebuild

docs(theme): correct nomarchy-themes-prebuild header comment

2026-05-21 20:41:43 +01:00

nomarchy-toggle-nightlight

fix(nightlight): gate hyprsunset on the toggle, drop hardcoded temperature

2026-05-22 18:20:44 +01:00