Skip to content

1.4.2

Choose a tag to compare

View all tags
@Dim145 Dim145 released this 20 Jun 00:47
1.4.2
0d589f2

Patch release.

1.4.2

  • Index signing resolves jarsigner explicitly (JAVA_HOME/bin → PATH → bundled JRE) with an actionable error instead of an opaque FileNotFoundError when a worker lacks the JDK on its PATH. Index signing only works in the worker image (which bundles the JDK) — never run rebuild_index from the API image.

Also includes 1.4.1 (never released):

  • Clears the CodeQL py/unsafe-deserialization alert on the metadata.yml importer (yaml.safe_load + a separate yaml.scan alias rejection; same billion-laughs protection).

Container images (backend / worker / frontend) are published to GHCR by CI for this release — pull :1.4.2 or :latest and redeploy.

Assets 2
Loading