Decker 1.42 is a maintenance release with a number of bugfixes, usability improvements, and scripting generalizations.

Fixes (Native):

• Writes to invalid glyph indices of a font could potentially cause crashes.

Fixes (Web):

• Correct a loophole in URL validation for open[], which permitted injection of arbitrary JavaScript. This didn't cause any actual danger, since loading JS in this fashion still required manual user interaction, but this "feature" was not intentional or portable.

Fixes (Web and Native):

• The %v format pattern was incorrectly considering consuming zero characters a valid match.
• The default "changecell" event handler did not correctly interpret columns with no configured format as strings ("s").

New Features:

• The behavior of the Home and End keys within fields has been changed to navigate the cursor to the beginning or end of the current line, respectively, as is common on Windows and Linux, instead of the traditional MacOS behavior (the beginning or end of the field).
• When editing Rich-Text fields, there is now a menu item "Edit -> Copy Rich Text" which copies the formatted content of a selection (including inline images) instead of just the underlying text. Note that rich text fragments in the clipboard do not automatically transfer fonts between decks.
• The "View -> Snap to Grid" option is now respected when moving selections of multiple widgets and when resizing Contraption Prototypes.
• The %j format pattern now serializes tables by casting them to a list-of-dictionaries representation instead of converting them into "null". Note that parsing with %j will not automatically coerce data of this shape into a table.
• The card.copy[] and card.remove[] functions now accept lists or dictionaries of Widgets, which can slightly simplify bulk copies and cleanup by removing the need for explicit loops or @.
• Decker now ships with Decker Sokoban, an example deck demonstrating how to make tile-based puzzle games.