HyperFrames v0.9.37

HyperFrames tightened two safety checks in v0.9.37. hyperframes templates pull now refuses any archive that holds more than plain files and folders, such as a symlink, hard link, or device entry. Nothing gets unpacked and no partial folder is left behind. Before, a link inside a pulled template could let preview, render, and publish reach files elsewhere on your machine.

Sharing is stricter too. snapshotProject and snapshotFiles throw invalid_source_ignore again when .hyperframesignore can't be read. In 0.9.35 they skipped the unreadable file, so an archive built from the snapshot could include files the ignore file was meant to leave out.

If your host uses those functions only for change detection, pass { lenientIgnore: true } to keep the 0.9.35 behavior. projectFingerprint already does.