Skip to content

Web Console 1.6.171

Choose a tag to compare

View all tags
@chen21019 chen21019 released this 03 Oct 04:00
· 17 commits to main since this release
Immutable release. Only release title and notes can be modified.
1.6.171
This tag was signed with the committer’s verified signature.
chen21019 Cheng-Chen, Chen
SSH Key Fingerprint: nF0fDZ8EQGL+GjPXONcQ9qd4VseNYmcscqwvax867AE
Verified
Learn about vigilant mode.
fc37f5a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Web Console 1.6.171

Fix new-record POST201 arriving after its subscribed canonical model. Adoption requires the same Store/generation/API base, exact concrete type and opaque server ID. Uncached creation, GET/PUT/action/non201/204/errors retain existing semantics. No authentication, authorization, backend or data migration changes.

Verified signed source: fc37f5a. Formal CI: https://github.com/PastureStack/web-console/actions/runs/37094728912. 802/802 QUnit tests, zero failure/skip/todo; ten new actual Store regressions include 100 deterministic barrier iterations. Audit-tool self-tests:22/22; CodeQL checks passed. Two production archives are byte-identical. These assets are the exact CI outputs, not a local rebuild.

Archive SHA256: 49fac41ca93eb628d0877104f9512ef382ffd9dbc89e04c940196b3a9c57798b; 2981230 bytes. Thirteen packaged locales retained. Windows audit CLI resolution no longer probes APPDATA; launcher/npm cwd shadowing is blocked while synchronous environment state is restored.

Upstream-pending build advisory GHSA-vfj7-8cjw-p6xm remains visible (formal CI raw 7 High / 3 Moderate / 0 Critical); no official patched braces version was available at review. Only the reviewed development closure is time-bounded until2026-10-10. Affected package modules are absent from the static archive inventory; this is not a zero-CVE or global runtime-not-affected claim. Unknown/changed/expired findings still fail closed.

Server packaging, fresh packaged native QA and the full permission/resource/locale matrix are separate acceptance steps, not claimed complete by this release. Preserve existing Compose configuration/persistent volumes and the prior immutable Server for rollback. No company deployment is authorized by this component publication.

Assets 5
Loading