Skip to content

v3.0.0

Latest
Latest

Choose a tag to compare

View all tags
@howonlee howonlee released this 28 Oct 22:58
· 45 commits to main since this release
v3.0.0
2d4852d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • fix(tests): canonicalize the temp repo path in the integration helper by @helizaga in #200
  • fix: prevent fetch option injection from configured remotes (VULN-562) by @howonlee in #206
  • fix: confine directory exclusions around symlinks (VULN-565) by @howonlee in #208
  • fix: bind command trust to repository identity (VULN-566) by @howonlee in #207
  • fix(security): bind trusted execution to unambiguous snapshots (12106) by @howonlee in #211
  • fix(security): confine configured copies to worktree paths (12106) by @howonlee in #210
  • fix(security): quote macOS terminal directory commands (12106) by @howonlee in #209
  • fix: restore macOS Bash 3.2 compatibility (12106) by @howonlee in #212

Full Changelog: v2.11.1...v3.0.0

Contributors

howonlee and helizaga
Assets 2
Loading