chore: update changelog to 1.2.57

[mhduiy]

更新说明

自动更新 changelog 到版本 1.2.57

变更内容

• 更新 debian/changelog

版本信息

• 新版本: 1.2.57
• 目标分支: master

Summary by Sourcery

Documentation:

• Refresh Debian changelog entries to document version 1.2.57.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Updates the Debian changelog to reflect release version 1.2.57 targeting master.

File-Level Changes

Change	Details	Files
Bump package version metadata in the Debian changelog to 1.2.57.	Add or update the latest changelog entry for version 1.2.57. Ensure the changelog formatting follows Debian standards for entries and version headers.	debian/changelog

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[github-actions]

TAG Bot

TAG: 1.2.57
EXISTED: no
DISTRIBUTION: unstable

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[deepin-ci-robot]

deepin pr auto review

☀
★ 总体评分：60分

■ 【总体评价】

提交仅包含变更日志而缺失核心实现代码，属于严重的提交不完整问题
因缺失核心修复逻辑导致无法编译验证，触发致命非安全缺陷扣分底线，保留60分

■ 【详细分析】

• 1.语法逻辑（存在严重错误）✕
  当前diff仅包含debian/changelog的文本追加，完全缺失针对autostart desktop entry的防御性判断核心代码，导致该修复在逻辑上无法生效
  潜在问题：核心逻辑缺失；无法验证空指针或越界访问是否被真正修复
  建议：补充完整的C++或Qt源代码修改diff，确保包含对用户目录下自启动文件存在性及desktop entry解析的guard逻辑

• 2.代码质量（存在严重问题）✕
  作为一个修复性提交，仅更新changelog而不包含任何实质性源码改动，严重违反代码提交规范
  潜在问题：提交内容不完整；缺乏对应实现代码的上下文
  建议：检查git提交命令，确保将实际修改的源文件加入暂存区并一并提交

• 3.代码性能（存在性能问题）✕
  缺失核心实现代码，无法评估新增的guard逻辑是否会引入额外性能开销
  潜在问题：未知的I/O阻塞风险；未知的频繁文件状态检查开销
  建议：在补充完整代码后，审查自启动项加载逻辑是否采用异步I/O或缓存机制以避免阻塞主线程

• 4.代码安全（存在0个安全漏洞）✓
  漏洞对比统计：新增漏洞 0 个，减少漏洞 0 个，持平 0 个
  当前diff仅为纯文本的变更日志更新，不涉及内存操作、文件路径解析或权限变更，无安全风险
• 建议：在后续补充的核心代码中，需严格校验自启动目录下的软链接指向，防止符号链接跟随导致的任意文件读取

■ 【改进建议代码示例】

// 基于上下文推测的缺失核心修复代码示例
// 假设位于读取自启动项的函数中
void loadAutostartEntries() {
    QDir autostartDir(QDir::homePath() + "/.config/autostart/");
    if (!autostartDir.exists()) {
        return;
    }

    QFileInfoList entryList = autostartDir.entryInfoList(QDir::Files | QDir::NoDotAndDotDot);
    for (const QFileInfo &fileInfo : entryList) {
        // 防御性判断：检查desktop文件是否存在且可读
        if (!fileInfo.exists() || !fileInfo.isReadable()) {
            qWarning() << "Autostart entry missing or unreadable:" << fileInfo.filePath();
            continue;
        }

        // 防御性判断：解析desktop entry时增加异常捕获与空指针保护
        QSettings desktopFile(fileInfo.filePath(), QSettings::IniFormat);
        desktopFile.beginGroup("Desktop Entry");
        
        QString name = desktopFile.value("Name").toString();
        if (name.isEmpty()) {
            qWarning() << "Invalid autostart desktop entry, missing Name:" << fileInfo.filePath();
            desktopFile.endGroup();
            continue;
        }
        
        bool autostartEnabled = desktopFile.value("X-GNOME-Autostart-enabled", true).toBool();
        desktopFile.endGroup();

        if (autostartEnabled) {
            // 执行后续启动逻辑
        }
    }
}

[deepin-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: caixr23, mhduiy, yixinshark

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• debian/deepin/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[caixr23]

/forcemerge

[deepin-bot]

This pr force merged! (status: blocked)

[deepin-bot]

TAG Bot

✅ Tag created successfully

📋 Tag Details

• Tag Name: 1.2.57
• Tag SHA: 226bddf6ebeedea1f71a49fda76f2434f3377922
• Commit SHA: a24c58df4b55673d4c089ece87684087851e3a87
• Tag Message:

  Release dde-application-manager 1.2.57
  
  

• Tagger:
  • Name: mhduiy
• Distribution: unstable