master
Fix a case where sqlite3expert could be tricked into executing arbitrary SQL by a corrupt database schema.
Make the test-use-only SQL function fts3_exprtest() (available only if compiled with SQLITE_TEST) more resistant to out-of-bounds inputs. [bugs:/info/2026-08-02T12:28:28Z|Bug 2026-08-02T12:28:28Z] and [bugs:/info/2026-08-02T12:31:40Z|bug 2026-08-02T12:31:40Z].
Add "include <stdint.h>" to test file fts5_tcl.c.
Update the utf-8 decoder in the ICU extension to treat invalid sequences as codepoint 0xFFFD, matching the core. Report [bugs:/info/2026-06-03T04:04:46Z | 2026-06-03T04:04:46Z].
Fix the parse_create_index() SQL function created by the incremental integrity_check extension so that it works for widely correct CREATE INDEX statements. [bugs:/info/2026-07-05T12:00:57Z|Bug 2026-07-05T12:00:57Z]. Also fix the extension so that it removes the parse_create_index() function. Add the sqlite3_intck_register() API function so that the parse_create_index() function can be more easily tested.
Remove an unused struct.
Fix a single byte buffer overrun in the approximate_match extension.
Adjust QRF to generate lower-case HTML output with the SQLITE_STYLE_Html style setting.
Reduce divergence between ext/misc/fossildelta.c, the delta code in ext/rbu/sqlite3rbu.c, and Fossil itself.
Harden the recovery extension against SQL injections coming from the sqlite_schema table of the database being recovered.
Fix the logic for big-endian CPUs. Add comments on how to test various limbs of the logic.
Fix a problem introduced by [32c762bbb1] causing sessions module conflict handling to malfunction when used with a database handle configured with sqlite3_extended_result_codes(). Also ensure the "session_eec" permutation, which would have detected this, is run as part of release testing.
Remove some stray debug output and obsolete bug-hunting comments. No functional changes.
Remove unnecessary "www." prefixes on domain names in URLs.