Skip to content

capgo-22.19.0

Choose a tag to compare

View all tags
@riderx riderx released this 27 Oct 00:51
· 55 commits to main since this release
Immutable release. Only release title and notes can be modified.
capgo-22.19.0
cae62f1

馃啎 Changelog

Changed

  • Serve storage images from Cloudflare R2 only for improved reliability and performance.

Removed

  • Removed Sign in with Apple authentication. Users who previously signed in with Apple must switch to email/password or another supported identity provider before signing in again.

Fixed

  • Set strict owner-only file permissions when writing the E2E private key through the CLI.
  • Keep the public user profile email address synchronized with the authentication provider email.

Security

  • Require an accepted organization membership with an active role binding to access deploy history.
  • Enforce the channel.read_history permission on all deploy history read operations.
  • Reject dot-segment (..) paths in attachment upload keys to prevent path traversal.
  • Restrict the organization encrypted-bundle enforcement check to service-role requests only.
  • Cap default API key bindings at the rights available to the key owner.
  • Prevent client writes to system-maintained application counters.
  • Restrict access to organization auto top-up and credit-flag columns to authorized systems.
  • Bind direct RBAC user checks to the calling session so users cannot inspect roles for other sessions.

馃敆 Full Changelog: capgo-22.18.2...capgo-22.19.0

Assets 3
Loading