Skip to content

Release v3.8.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Aug 15:58
v3.8.2
08acf7e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Prevent Stage and generated Cratis applications from weakening or bypassing modeled authorization while the portable policy/runtime work is developed. Rendering unsupported authorization now fails visibly instead of producing runnable broader access.

Fixed

  • Render exact role alternatives per generated query method and block conjunctions, claims, code, missing, or mixed policies that cannot be preserved. (#20)
  • Propagate typed rendering failure, suppress false completion, and leave a non-overwriting advisory marker for unsafe direct-write targets. (#20)
  • Deny Stage query authorization and anonymous access until declared query policies can be carried and executed, preventing performer execution or data exposure. (#30)

Changed

  • Document Stage runtime, specification-runner, rendering responsibilities, .play input, current limitations, and deferred frontend rendering. (#19)
Assets 2
Loading