Skip to content

v0.5.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Oct 02:45
· 8 commits to main since this release
v0.5.7
f126985
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Dependency security updates

This release updates pinned transitive dependencies to resolve the scheduled vulnerability audit findings:

  • fast-uri: 3.1.6 → 3.1.8
  • ip-address: 10.3.1 → 10.7.1
  • hono: 4.13.5 → 4.13.7
  • proxy-addr: 2.0.7 → 2.0.8, resolving GHSA-jqcg-44mw-7w3h, identified during release validation.

The release dependency audit reports no vulnerabilities. Linux x64/arm64 and macOS x64/arm64 binaries are included, with Developer ID signing and Apple notarization for both macOS builds.

What's Changed

  • Add security persona by @ccbiff in #10
  • Add reusable security evidence and client job contracts by @ccbiff in #11
  • Update vulnerable transitive dependency overrides by @ccbiff in #12
  • Release 0.5.7 with patched dependencies by @ccbiff in #13

Full Changelog: v0.5.6...v0.5.7

Contributors

ccbiff
Assets 11
Loading