Skip to content

v0.4.3

Choose a tag to compare

@github-actions github-actions released this 20 Aug 14:12
· 78 commits to main since this release
84788e4

What's Changed

  • test(verify): stop the probe-leak test passing without an interpreter
  • docs(dev-docs): stop the offensive agent calling every SAFE shift a bug
  • docs(release): record the two bypasses found in review of 0.4.3
  • fix(verify): resolve symlinks before trusting a diff path
  • fix(verify): redact the coverage probe, not only the coverage run
  • chore(release): 0.4.3
  • docs(dev-docs): list the offensive agent in the roster table
  • chore(dev-docs): add an offensive-security-engineer subagent
  • docs(dev-docs): rewrite the security policy for the shipped product
  • fix(verify): refuse diff paths that point outside the repository
  • fix(verify): stop handing our credentials to the verified test suite

Install

npm install -g refactron@

What's Changed

  • fix(verify): shadow tree could write to the caller's repo, plus four false SAFEs by @omsherikar in #131
  • chore(release): 0.4.3 - credential redaction and diff-intake containment by @omsherikar in #132

Full Changelog: v0.4.2...v0.4.3