Skip to content

Release v2.14.1

Latest
Latest

Choose a tag to compare

View all tags
@rekhoff rekhoff released this 04 Nov 20:16
· 13 commits to master since this release
v2.14.1
a0bf6be
This commit was signed with the committer’s verified signature.
rekhoff Ryan
GPG key ID: 30A27895AD7673B4
Verified
Learn about vigilant mode.

Bug Fixes

Refresh TLS trust following the eMudhra/emSign CA incident

Updated TLS certificate verification dependencies and refreshed certificate trust stores in distributed container images to address the eMudhra/emSign certificate authority key compromise. The updated WebPKI verifier rejects the compromised intermediate keys, and affected roots are removed from the Nix development environment's CA bundle.

Operators should upgrade their SpacetimeDB binaries and container images. See the RustSec advisory for details about the upstream incident.

(#6366)

Preserve UUID and branded primitive types in TypeScript

TypeScript type inference now preserves Uuid values and branded primitives instead of expanding them into structural records. UUID columns retain their Uuid type, and branded strings remain assignable to string. This is a types-only fix with no runtime behavior change.

(#5971)

Restore Nix development builds

Updated the Nix flake to Rust 1.97.1 and pinned the required wasm-bindgen version, restoring the Nix development workflow.

(#6344)

What's Changed

  • Updated TLS verification dependencies and container trust stores following the eMudhra/emSign CA incident in #6366
  • Fixed TypeScript inference for UUIDs and branded primitives in #5971
  • Restored Nix development builds in #6344

Full public changelog: v2.14.0...v2.14.1

Assets 12
Loading