Repository navigation
Built with Go 1.26.10, for a correction to the certificate check of the webhook notification, and with newer versions of the two compression libraries.
--webhooksends its message over HTTPS. Go 1.26.10 holds a list of intermediate certificates that are no longer to be trusted and refuses a connection whose certificate chain goes through one of them (GO-2026-6809); every earlier version of wslbak was built with a Go that has no such list. The advisory calls the cases it matters for narrow: on most systems the system's own certificate store decides, and the list is for a store that has not been brought up to date. The webhook is the only connection wslbak makes; backups and restores do not touch the network.- The compression library klauspost/compress is at 1.20.3 (was 1.20.1). Its changes are in parts wslbak does not use (zstd, s2, zip); the code that writes and reads the
.tar.gzfiles is the same. - klauspost/pgzip, which compresses the backup on several cores, is at 1.3.0 (was 1.2.7). Of its changes, one reaches wslbak: when finishing the file fails (a full destination, for instance), it now also stops its own background work. The compressed data it writes is the same.