Skip to content

v1.2.3

Choose a tag to compare

View all tags
@Ostico Ostico released this 24 Jul 17:10
· 590 commits to main since this release
v1.2.3
9cefcac
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Draft — publishing this release creates & pushes the v1.2.3 tag, which triggers the npm publish workflow.

⚠️ Restores work missing from 1.2.2

Commit 3e9adb2 (pre-request scripts, parallel folder execution, HTTPS/proxy dispatcher) was committed locally but never reached the published 1.2.2 — that release forked before it. 1.2.3 reconciles it back in, and actually wires the TLS/proxy settings (they were previously unreachable from a request file).

✨ Features

  • Multipart / form-data & file uploads — create_request/modify_request form-data items support contentType and value as a string or array (multi-file); requests are sent as real multipart/form-data with per-part Content-Type honored. (Previously form fields were silently dropped and the executor had no multipart support → the source of 415s.)
  • run_collection returns the response body — response_body (byte-capped, UTF-8 safe), response_body_truncated, response_content_type; options includeResponseBody (default true), maxResponseBodyBytes (default 10240).
  • Environment merge tools — update_environment, set_environment_variable, remove_environment_variable — merge without clobbering unlisted (incl. disabled) variables. create_environment still replaces.
  • Inline scripts on create_request/modify_request (pre-request/post-response/tests, with before-request/after-response accepted as aliases).
  • TLS/proxy + redirect settings wired — settings.tls / settings.proxy now read from request files; followRedirects/maxRedirects honored instead of a hardcoded 10-hop follow.
  • Pre-request scripts & parallel folder execution (restored via 3e9adb2).

🔒 Security

  • SSRF guard (DNS-resolution + BRUNO_SSRF_ALLOWLIST, shipped in 1.2.2) verified intact: pre-request URL mutations are re-validated before fetch; every redirect hop re-validated.
  • Review fix: env merge no longer deletes disabled variables.

✅ Quality

  • Coverage raised to 100% lines / 94.6% branches (801 tests).
  • New CI test-guard adequacy gate (threshold 95) on PRs, enforced via branch protection.

Notes

  • secret on set_environment_variable is accepted but not persisted (documented).
  • Known residual: DNS-rebinding on the SSRF guard (needs connect-time IP pinning) — tracked follow-up.

What's Changed

  • v1.2.3: reconcile 3e9adb2 + multipart, response body, env merge tools, inline scripts, TLS/proxy wiring by @Ostico in #2
  • ci: add test-guard adequacy gate + coverage artifact by @Ostico in #3

Full Changelog: v1.2.2...v1.2.3

Contributors

Ostico
Assets 4
Loading