v6.2.0

Promoted from v6.2.0-dev.7

This release gives each session a short alias for its address, keeps the last output of a process that exits quickly, and hardens logging and screen sizing against hostile clients.

Added

• Each session now has an alias, 8 random URL-safe characters by default, returned by GET /api/sessions, the create response and the status stream. SessionManager.SetSessionAlias replaces it with your own name of up to 64 characters from [A-Za-z0-9_-], and refuses an alias another live session holds. The TypeScript SessionInfo gains alias?: string. (#669)

Fixed

• A process that prints and exits at once, such as sh -c "echo goodbye", no longer loses its last output or delivers it after the exit event. The session now waits up to 1 second for the terminal output to drain before it reports the exit. (#660)
• LogID now replaces line breaks, control characters, bidirectional-text controls and invalid UTF-8 in the session id prefix it returns, so a crafted resume id cannot forge or reorder log lines. (#675)
• vt.New and Screen.Resize now cap each dimension at 1000 rows or columns, the same limit the terminal handler already applied to client resizes. (#675)

Full changelog: v6.1.2...v6.2.0