Skip to content

Web Console 1.6.172

Choose a tag to compare

View all tags
@chen21019 chen21019 released this 03 Oct 08:42
· 22 commits to main since this release
Immutable release. Only release title and notes can be modified.
1.6.172
This tag was signed with the committer’s verified signature.
chen21019 Cheng-Chen, Chen
SSH Key Fingerprint: nF0fDZ8EQGL+GjPXONcQ9qd4VseNYmcscqwvax867AE
Verified
Learn about vigilant mode.
daab6e8
This commit was signed with the committer’s verified signature.
chen21019 Cheng-Chen, Chen
SSH Key Fingerprint: nF0fDZ8EQGL+GjPXONcQ9qd4VseNYmcscqwvax867AE
Verified
Learn about vigilant mode.

Web Console 1.6.172

Preserve API-key create-only first delivery when redacted subscribe precedes POST201. Only the API-key editor opts into actual Schema readOnCreateOnly fields, delivered once into its detached clone rather than canonical cache. Newer state and nested-resource adoption remain intact. Store/generation/API base/exact opaque ID/concrete type/account binding and save-owner cleanup are retained; duplicate submissions and synchronous callback errors cannot replay create. Other consumers, save-hook arguments/results, API payloads and backend permissions are unchanged.

Verified signed artifact source: daab6e8; tested tree: 8f6c8eb930fe77d6983a37e9b30912a384af5e7e. Signed PR head 47eba49 has the identical tested tree and one protected-main parent; no protection bypass or artifact rebuild. Formal CI: https://github.com/PastureStack/web-console/actions/runs/37109872791. 808/808 QUnit tests, zero failure/skip/todo; fourteen actual Store cases include personal/project first-delivery barriers (100 each), plus two new save-owner cleanup cases. Audit-tool self-tests and exact PR checks must pass. Two production archives are byte-identical. Assets are exact CI outputs, not a local rebuild.

Archive SHA256: 9a21c5e6ff9fbb274dbc7c45ec1ccffdbff33a945544b64d5976b14ee9752bfa; 2981642 bytes. Thirteen packaged locales retained. API-store compatibility revision 6 preserves upstream license content and the existing dependency graph; earlier archives remain unchanged.

Upstream-pending build advisory GHSA-vfj7-8cjw-p6xm remains visible (formal CI raw 7 High / 3 Moderate / 0 Critical). Only the reviewed development closure is time-bounded until 2026-10-10. Affected package modules are absent from the static archive inventory; this is not a zero-CVE or global runtime-not-affected claim. Unknown/changed/expired findings still fail closed.

Server packaging, packaged native first-delivery acceptance and the full permission/resource/locale matrix remain separate, not claimed complete by this component release. Historical HOLDs remain HOLD. Preserve existing configuration/persistent volumes and the prior immutable Server for rollback. No company deployment is authorized by component publication.

Assets 5
Loading