Skip to content

DarwinRelay 0.6.6

Choose a tag to compare

View all tags
@dcierra dcierra released this 22 Aug 07:29
v0.6.6
3c907ab
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

DarwinRelay 0.6.6 fixes the manual update path after production validation exposed an ownership bug in the kill switch.

Highlights:

  • scripts/disable.sh now treats only the cloudflared PID recorded by DarwinRelay as DarwinRelay-owned tunnel authority; unrelated Cloudflare tunnels on the same Mac no longer make a clean stop/update impossible and are never signalled;
  • zero-downtime deploy verification uses the same recorded ownership boundary instead of whichever cloudflared command appears first;
  • the manual updater now extracts the target release's scripts/disable.sh before changing HEAD, verifies it against the target release's SHA256SUMS, and uses that verified kill switch for fail-closed quiescence. A newer release can therefore repair containment logic that is broken in an older installed release;
  • lifecycle coverage now exercises unrelated, owned, and stale tunnel pidfile cases with all control-plane paths isolated from production state.

Validation:

  • the original v0.6.4 → v0.6.5 production update failure rolled back checkout/app correctly;
  • PR #18 and release PR #19 are green;
  • post-merge CI and JavaScript CodeQL are green;
  • full local npm test for the v0.6.6 candidate exited 0;
  • integrity verified for 113/113 tracked regular files;
  • build-only DarwinRelay.app smoke produced bundle version 0.6.6 and passed deep strict codesign verification;
  • gitleaks reported no leaks;
  • zero open GitHub code-scanning alerts at release time.
Assets 2
Loading