Reject bad redirects cleanly and ignore any icon read error

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

app/build/fetch-deps.js

@@ -49,7 +49,10 @@ function get(url, redirects = 5) {
       if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
         res.resume();
         if (!redirects) return reject(new Error(`${url}: too many redirects`));
-        return resolve(get(new URL(res.headers.location, url).href, redirects - 1));
+        let next;
+        try { next = new URL(res.headers.location, url).href; }
+        catch { return reject(new Error(`${url}: bad redirect ${res.headers.location}`)); }
+        return resolve(get(next, redirects - 1));
       }
       if (res.statusCode !== 200) return reject(new Error(`${url}: HTTP ${res.statusCode}`));
       const chunks = [];

ui/frame_apk.py

@@ -204,8 +204,8 @@ def apk_info(path):
         }
         try:
             info['icon_png'] = _icon_png(z, names, _icons(app.get('icon'), res))
-        except (zipfile.BadZipFile, RuntimeError, OSError):
-            pass  # a missing icon shouldn't stop the install
+        except Exception:  # noqa: BLE001 - any unreadable icon just means no icon
+            pass
     return info