Traversio 1.0.7 is a source-compatible reliability and hardening update for the current 1.0 line.
Behavior updates:
- A conservative background keepalive is now enabled by default. Silent or half-dead peers are detected out of band, and keepalive plus idle-rekey timers survive transport rekey paths.
close()and remote-forward graceful drain paths are bounded so dead peers do not keep teardown open-ended.- Per-channel receive buffering now applies backpressure by consumption, and consumed window credit is protected from caller cancellation.
- Wire and SFTP parsers bound attacker-controlled allocations against remaining payload bytes. SFTP concurrent-read failure cleanup and request-id wrap behavior are also hardened.
- Chacha20-Poly1305 transport epochs force rekey before the packet sequence number nonce could wrap.
- Local and dynamic forwarding honor fixed requested ports when callers bind
localHost: "localhost". - Proxy transports now forward network path and transport observations through the same public connection state path as direct transports.
Validation:
Tools/check-release-metadata.sh 1.0.7Tools/check-public-api.sh checkswift testswift build -Xswiftc -warnings-as-errorsswift build -Xswiftc -strict-concurrency=complete -Xswiftc -warn-concurrency