Skip to content

zWorkforce v3.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Aug 08:37
· 678 commits to main since this release
v3.0.1
This tag was signed with the committer’s verified signature.
cvsz cvsz
GPG key ID: 220A4C8CCC7D2D50
Verified
Learn about vigilant mode.
d5c0655
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

This patch release carries the post-v3.0.0 security, reliability, and dependency hardening.

  • Hardened response headers and fixed static asset MIME mappings.
  • Replaced weak API-key verification with salted PBKDF2-HMAC-SHA256 verifiers; legacy unsalted records must be recreated and rotated.
  • Kept generated CLI secrets in mode-0600 files without printing plaintext secrets.
  • Made PostgreSQL integration fixtures isolated and repeatable.
  • Updated Python 3.14 and GitHub Actions/container dependencies.
  • Added protected-main and repeatable validation gates.

Artifacts

The release includes the Python wheel, source archive, CycloneDX SBOM, and SHA256SUMS. The published OCI image is ghcr.io/cvsz/zworkforce:v3.0.1.

This release is immutable; v3.0.0 was not moved.

Assets 6
Loading