Skip to content

v1.8.2: Protect quota cache credential fingerprints

Choose a tag to compare

View all tags
@btsouth btsouth released this 30 Sep 01:00
· 17 commits to main since this release
v1.8.2
2232576

Replace the API-key fingerprints in Ollama Cloud, CommandCode, and ClinePass quota caches with salted PBKDF2-HMAC-SHA256. This addresses CodeQL alerts #1, #2, and #3.

Existing caches refresh once after upgrading. Changed or removed keys still take effect immediately, and raw keys stay out of the quota caches.

Update with:

curl -fsSL https://raw.githubusercontent.com/btsouth/omarchy-usage-dashboard/main/install.sh | bash -s -- --with-plugin

Full changelog

Assets 2
Loading