Skip to content

v0.26.2

Choose a tag to compare

View all tags
@thomasmaas thomasmaas released this 15 Jul 06:52
· 85 commits to main since this release
v0.26.2
This tag was signed with the committer’s verified signature.
thomasmaas Thomas Maas
SSH Key Fingerprint: 4Vegsr11VwxpH2wJ/5BHYF/c+FHijzpESWQ/0BAOagE
Verified
Learn about vigilant mode.
e114b0b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Bug Fixes

  • fix: prevent OAuth2 introspection panic on non-200 / missing "active" response
  • Fix authorization failing open on context timeout (#650)
  • fix: disable pprof on status update manager to avoid port clash
  • ensure UMA request PAT response body data stream is closed

Security & Dependencies

  • Upgrade Go to 1.26.4
  • Upgrade Go to 1.26.3

CI & Infrastructure

  • Add CodeQL workflow
  • Add cosigning and provenance attestation to image builds
  • [StepSecurity] ci: Harden GitHub Actions

Other

  • avoid shared port number in the tests
  • Remove hardcoded Go version from docs/contributing.md

Full Changelog: v0.26.1...v0.26.2

Assets 2
Loading