Skip to content

backend-v0.10.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 May 17:16
· 27 commits to master since this release
backend-v0.10.4
5159d99
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • JWT startup hardening: backend startup now fails closed when authentication is enabled with the packaged JWT_SECRET=change-me-in-production outside demo/debug/explicit local-dev override mode. Set a real JWT_SECRET for deployments, or set ALLOW_INSECURE_DEFAULT_SECRET=true only for local development.
  • Dependency security updates: bumped FastAPI to 0.120.4, which resolves the FastAPI form parsing ReDoS advisory and pulls Starlette to a patched release line for multipart and file range handling advisories.
Assets 2
Loading