Skip to content

v3.2.0

Choose a tag to compare

View all tags
@chandshy chandshy released this 14 Jul 17:52
v3.2.0
c5479df
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Account-scoped runtime and authorization hardening, fail-closed live Proton Bridge E2E safety harness, and an exact-SHA release attestation gate.

Highlights:

  • Durable per-grant rolling hourly quotas; account-bound runtime state for FTS, scheduler, reminders, analytics, and SMTP status
  • Folder-restricted grants validate every operand and returned-message provenance; revocation applies on the next authorization check
  • Webhook SSRF hardening (DNS pinning, private-range rejection, bounded delivery); settings server DNS-rebinding and CSRF hardening
  • Fail-closed config/singleton/grant locking with owner records; per-field credential quarantine
  • Live Bridge E2E: exact-ownership proofs, run lease, fail-closed deadlines, mutation-refusal retries, All Mail COPY-only rescue
  • Release publishing verifies exact-SHA CI, preship, and live Bridge E2E attestations before npm publish

See CHANGELOG.md for the full list.

Assets 2
Loading