v1.7.3

Changes since v1.7.1

• chore: bump application version to 1.7.3 (#317) (15a07bd)
• docs: add changelog entry for 1.7.3 token generation fix (#316) (db53c50)
• fix: token creation bug (#314) (5594158)
• chore: Update version to 1.7.2 and update CHANGELOG.md (#313) (d39f84b)
• fix: Fix logging for snippet tag setting errors by truncating error messages (#312) (c6d7e4a)
• fix: derive HMAC keys from session secret instead of hardcoding (#308) (d1df803)
• fix: move S3 delete key from query param to URL path (#303) (9aac132)
• fix: require TrustProxy for X-Forwarded-Proto in scheme() (#310) (8ac7175)
• fix: sanitize FTS5 query input to prevent injection attacks (#302) (1a9ed60)
• fix: redact sensitive query params from logs and reject passwords in URLs (#304) (d96666f)
• fix: clear user-controlled data from log entries (#311) (2541c20)
• fix: remove X-API-Key from session token extraction (#305) (27ec004)
• fix: sanitize Host header in pagination links to prevent injection (#307) (3c2aabe)
• fix: resolve OpenAPI spec path relative to executable (#309) (e80df0f)
• fix: enforce Content-Type must be application/json in DecodeJSON (#301) (c1cc351)
• fix: sanitize user input in log entries to prevent log injection (#300) (52ada25)
• update actions using sanad (#299) (007ec9b)
• feat: make footer version clickable to CHANGELOG section (#298) (66c3f1b)
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.0 (#293) (5a82acd)
• chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#291) (2e88f59)
• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#294) (2de0252)
• chore(deps): bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 (#296) (2362370)
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.29 (#297) (752e9ae)

Docker

Standard

docker pull ghcr.io/mohamedelashri/snipo:v1.7.3

Hardened

docker pull ghcr.io/mohamedelashri/snipo:v1.7.3-hardened

What's Changed

• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.29 by @dependabot[bot] in #297
• chore(deps): bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 by @dependabot[bot] in #296
• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #294
• chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #291
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.0 by @dependabot[bot] in #293
• feat: make footer version clickable to CHANGELOG section by @MohamedElashri in #298
• update actions using sanad by @MohamedElashri in #299
• fix: sanitize user input in log entries to prevent log injection by @MohamedElashri in #300
• fix: enforce Content-Type must be application/json in DecodeJSON by @MohamedElashri in #301
• fix: resolve OpenAPI spec path relative to executable by @MohamedElashri in #309
• fix: sanitize Host header in pagination links to prevent injection by @MohamedElashri in #307
• fix: remove X-API-Key from session token extraction by @MohamedElashri in #305
• fix: clear user-controlled data from log entries by @MohamedElashri in #311
• fix: redact sensitive query params from logs and reject passwords in URLs by @MohamedElashri in #304
• fix: sanitize FTS5 query input to prevent injection attacks by @MohamedElashri in #302
• fix: require TrustProxy for X-Forwarded-Proto in scheme() by @MohamedElashri in #310
• fix: move S3 delete key from query param to URL path by @MohamedElashri in #303
• fix: derive HMAC keys from session secret instead of hardcoding by @MohamedElashri in #308
• fix: Fix logging for snippet tag setting errors by truncating error messages by @MohamedElashri in #312
• chore: Update version to 1.7.2 and update CHANGELOG.md by @MohamedElashri in #313
• fix: token creation bug by @MohamedElashri in #314
• docs: add changelog entry for 1.7.3 token generation fix by @MohamedElashri in #316
• chore: bump application version to 1.7.3 by @MohamedElashri in #317

Full Changelog: v1.7.1...v1.7.3