Skip to content

2.43.1 - 2026-10-01

Choose a tag to compare

@ddon ddon released this 01 Oct 13:21
· 797 commits to main since this release

Patch release for the independent review of 2.43.0.

  • Exclude all uploaded and generated files under priv/media from the Hex package. The release gate now inspects the built artifact and rejects runtime media or generated sitemaps.
  • Enforce folder ownership for Media events using folder-uuid, preventing restricted viewers from changing another user's visible folder.
  • Preserve wall-clock cache deadlines across slow loads and mailbox delays; skip caching values whose deadline has passed.
  • Run admin-page generator tests synchronously to avoid overwriting other tests' repository configuration.

Validation: 7,399 tests and 71 doctests passed with PostgreSQL (six skipped, one excluded); precommit passed, including 254 JavaScript tests. Packaging and release checks also passed after the version bump.

See the changelog and independent review.