chore: update changelog to 1.0.39

[mhduiy]

更新说明

自动更新 changelog 到版本 1.0.39

变更内容

• 更新 debian/changelog

版本信息

• 新版本: 1.0.39
• 目标分支: master

Summary by Sourcery

Chores:

• Bump recorded package version in debian/changelog to 1.0.39.

[github-actions]

TAG Bot

TAG: 1.0.39
EXISTED: no
DISTRIBUTION: unstable

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Updates the Debian package changelog to bump the project version to 1.0.39 on the master branch.

File-Level Changes

Change	Details	Files
Bumps Debian package changelog entry to version 1.0.39.	Add or update the top changelog stanza to reflect version 1.0.39. Ensure the changelog formatting remains compliant with Debian conventions.	debian/changelog

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[deepin-ci-robot]

deepin pr auto review

这段代码是 Debian 软件包的变更日志文件（debian/changelog），用于记录软件包的版本历史和更新内容。以下是对这段 git diff 的审查意见：

1. 语法与格式审查

• 符合标准：该 diff 符合 Debian changelog 的标准格式（package (version) distribution; urgency=urgency），格式规范，没有语法错误。
• 时间戳异常：时间戳显示为 2026 年（Thu, 29 Jan 2026）。虽然这在语法上是允许的，但在当前时间（2023-2024年左右）提交带有未来日期的记录是不符合常规的。这可能是系统时间设置错误，或者是手动输入时的笔误。
  • 建议：请将年份修正为当前年份（例如 2024 或 2025）。

2. 代码质量审查

• 提交信息规范：使用了 fix: 前缀，符合常见的提交规范，表明这是一个错误修复类型的提交。
• 描述清晰度：描述 add JSON validation for text input fields 比较清晰，明确指出了本次更新的目的是为文本输入字段增加 JSON 验证。
• 版本号管理：版本号从 1.0.38 升级到 1.0.39，符合语义化版本控制中修复补丁（Patch）的递增规则。

3. 代码性能与安全审查

• 安全改进：从变更内容来看，本次更新涉及“JSON 验证”。
  • 正面影响：在文本输入字段增加 JSON 验证通常是一个很好的安全实践，可以有效防止 JSON 注入攻击、格式错误导致的应用崩溃，以及确保数据完整性。
  • 潜在建议：虽然 changelog 只是记录，但在对应的代码实现中，请确保：
    • 验证逻辑严格，不仅检查格式，还应检查字段类型和范围。
    • 对解析失败的 JSON 有完善的错误处理机制，避免直接将原始错误信息暴露给前端用户，防止信息泄露。

4. 综合改进建议

1. 修正时间戳：将日期 2026 修改为正确的年份。
2. 详细描述：如果此次修复涉及特定的安全漏洞（CVE）或特定的 Bug ID，建议在 changelog 中引用，以便于追踪和审计。
3. 关联 Issue：如果项目使用 Issue 追踪系统，可以在描述末尾添加 Closes: #123 之类的引用。

修正后的示例：

+dde-app-services (1.0.39) unstable; urgency=medium
+
+  * fix: add JSON validation for text input fields to prevent injection and crashes.
+
+ -- zhangkun <zhangkun2@uniontech.com>  Thu, 29 Jan 2024 20:39:55 +0800

[deepin-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mhduiy, xionglinlin

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• debian/deepin/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[mhduiy]

/forcemerge

[deepin-bot]

This pr force merged! (status: blocked)

[deepin-bot]

TAG Bot

✅ Tag created successfully

📋 Tag Details

• Tag Name: 1.0.39
• Tag SHA: a04dd1ed763bee27457b87762f444e2a466d75c8
• Commit SHA: 3da0468324e538a3b3051b88df81396744635d10
• Tag Message:

  Release dde-app-services 1.0.39
  
  

• Tagger:
  • Name: mhduiy
• Distribution: unstable