sf-deck 0.1.7

sf-deck 0.1.7

This release hardens sf-deck's network, credential, filesystem, and release
boundaries while keeping the existing workflow intact.

Security

• Authenticated Salesforce requests now require HTTPS instance URLs and refuse
  redirects outside the authenticated Salesforce origin.
• Salesforce IDs, API names, metadata types, and generated SOQL are validated
  before they reach request paths.
• Runtime credentials and recognised secret formats are redacted from logs,
  diagnostic dumps, traces, and error output.
• Local databases, diagnostic files, and the control socket are restricted to
  the current user.
• Forced bundle updates replace leaf symlinks safely instead of writing through
  them.
• Release archives now receive GitHub/Sigstore build-provenance attestations.
• Binaries are built with Go 1.26.7, including the latest net/http fixes in
  the Go 1.26 release line.
• golang.org/x/text is updated to 0.39.0.

Behaviour and documentation

• Bubble Tea, Bubbles, Lip Gloss, ANSI handling, and SQLite are updated to their
  latest compatible releases.
• Navigation jumps ten rows by default with Ctrl+Arrow, J, or K.
• Deploy polling settles at ten-second intervals and the live deploy view
  refreshes every twenty seconds to reduce Salesforce API usage.
• Privacy and local-data documentation now covers debug-log history, saved
  comparisons, diagnostic dumps, and optional traces.

Install on Debian or Ubuntu

curl -LO https://github.com/Jacob-Stokes/sf-deck/releases/download/v0.1.7/sf-deck_0.1.7_linux_amd64.deb
sudo apt install ./sf-deck_0.1.7_linux_amd64.deb

ARM64, RPM, portable Linux, and macOS builds are available on the release page.

Homebrew

brew upgrade --cask sf-deck