v0.43.139

Changelog

• f728c42 Merge pull request #414 from Infisical/bernie/pam-509-add-native-protocol-support-for-clickhouse-pam
• a6554f7 Merge pull request #413 from Infisical/ak-new-commands
• af300fa chore: pick up the depth-based nesting bound
• 830482f refactor(clickhouse): name the memory budget and idle timer plainly
• a29cd07 chore: pick up the enum label fix in the nesting bound
• e468674 fix(clickhouse): refuse a column type too deeply nested to infer
• f072b27 fix(clickhouse): reserve only for a byte that is really there
• 7341cfe fix(clickhouse): reserve before a byte leaves the reader
• 32a7d9a fix(clickhouse): give a charge back before the raw relay starts
• 54b779d fix(clickhouse): charge a tap before it grows, not after
• 40df24b test(clickhouse): follow the renamed refusal outcome
• e01a506 fix(clickhouse): record a refusal the gateway made itself
• 61613df fix(clickhouse): charge the bytes a tap is holding
• d64e0a0 fix(clickhouse): bound the protocol sniff on a relayed session
• f67e1d3 fix(clickhouse): bound the server direction and stop holding bytes twice
• d30d8c3 fix(clickhouse): ignore a stall guard firing its packet already left
• 9c40100 fix(clickhouse): cut off a stalled packet without the transport
• 4f7090c fix(clickhouse): charge a packet's memory as it arrives
• 2ab3d0a fix(clickhouse): bound a session rather than reserving a gateway's share
• 458ac28 chore: pick up the ch-go string batch allocation fix
• 2baad19 fix(e2e): point the test module at the patched ch-go too
• f456c54 fix(clickhouse): bound the handshake and refuse a redirected probe
• 8718528 fix(clickhouse): bound what a native session may allocate
• 455038b remove projects
• 11e2b11 address veria
• 103040e add hint for profile binding after non interactive init
• 227af4f suggest editing workspaceId when init is already linked
• 5876551 fix endpoint for project creation
• b57242a remove force flag and reformat
• 65724ad remove json flag form org and projects
• 599886d chore(clickhouse): explain the bounded decoder and fix a truncated comment
• f33020f test(clickhouse): restore the session-level oversized block check
• fd88e90 fix(clickhouse): enforce data block limits inside the decoder
• 851b6e9 chore(clickhouse): trim comments to one line
• 4e3c369 fix(clickhouse): bound the data block and stop losing outcomes on a panic
• c3d89e1 fix(clickhouse): bound the whole packet and close the session on both races
• 650ec02 test(clickhouse): drop the e2e test until the backend is on main
• b0f0a5b fix(clickhouse): wait for the e2e database before seeding it
• b0e19a6 fix(clickhouse): bound every declared length in a native packet
• 5adc23b fix(clickhouse): check the executable SQL against the blocking policy
• 2162877 test(clickhouse): move live-server tests to the e2e suite
• 4c44bb3 fix(clickhouse): harden the native handshake and probe classification
• 5340855 remove unnecessary import command
• b43bb35 fix(clickhouse): refuse http clearly on a native-only account
• f978cb9 refactor(clickhouse): drop the HTTP-to-native bridge
• 7f838fa chore(clickhouse): trim comments
• 45f20f5 feat(pam): clickhouse native protocol
• 6d3155d once again
• f057207 address even more comments
• de5bab1 address greptile again
• 330095c address review comments
• e2c9c96 feat(cli): add bootstrap verbs for AI-agent quickstart
• f3ad484 fix(cli/login): make browser flow subprocess-safe