Skip to content

v0.0.17

Choose a tag to compare

View all tags
@LuisCMerrick LuisCMerrick released this 25 Aug 07:27
v0.0.17
879fce9

Security and release hardening for MirrorRelay v0.0.17.

Highlights:

  • Redacts repository credentials and raw runtime diagnostics from every non-Admin role, with Admin-only sensitive configuration and cluster-node credential management.
  • Encrypts Coordinator Edge mutation tokens at rest with a file-backed AES-256-GCM rotation keyring.
  • Trusts X-Real-IP only from configured ingress peers, keeps inferred public URLs on validated HTTPS authorities, and defaults client-IP exposure off.
  • Validates and precompiles bounded package policies with fail-closed persisted-state handling.
  • Uses the official latest multi-architecture image in the bilingual four-method Quick Start and Compose model.
  • Strengthens package and container binary provenance checks.

The Release Build workflow publishes verified linux/amd64 and linux/arm64 packages, the vendored source archive, and Docker Hub tags 0.0.17, v0.0.17, and latest.

Assets 10
Loading