Skip to content

v0.6.0

Choose a tag to compare

View all tags
@dchuk dchuk released this 18 Feb 06:37
· 386 commits to main since this release
v0.6.0
543aad1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[0.6.0] - 2026-02-17

Added

  • AIA (Authority Information Access) certificate resolution for SSL failures. When feed fetching or scraping encounters certificate verify failed errors due to missing intermediate certificates, the engine now automatically fetches the missing intermediate via AIA URLs and retries the request. This fixes feeds hosted on servers with incomplete certificate chains (e.g., Medium/Netflix Tech Blog on AWS).
  • SourceMonitor::HTTP::AIAResolver module with thread-safe hostname-keyed cache (1-hour TTL), SNI support, and DER/PEM certificate parsing.
  • cert_store: parameter on SourceMonitor::HTTP.client for passing custom certificate stores.
  • Brakeman ignore configuration (config/brakeman.ignore) for the intentional VERIFY_NONE in the AIA resolver's leaf certificate fetch.

Testing

  • 1,028 tests, 0 failures (up from 1,003 in 0.5.x).
  • RuboCop: 0 offenses.
  • Brakeman: 0 warnings (1 intentional ignore).
Assets 2
Loading