v3.8.2

3.8.2 (2026-10-04)

Bug Fixes

• config: refuse two sync deployments into one target (#296) (5c8eaab)
• hostkeys: accept the ssh-keygen -lf lines the quick start tells users to store (#304) (22cad70)
• hostkeys: ask the server for the key types the known-hosts lines pin (#294) (1513290), closes #282
• security: pin the attested source commit for tag refs too (#299) (e288f18)
• security: split the benchmark jobs that measure from the jobs that write (#300) (2ed0861)
• uploader: bound the whole connect path by advanced.timeout, not just the TCP dial (#295) (95724ca)
• uploader: count granted connections, not touched pool slots (#293) (1c1ff58), closes #281
• uploader: delete the entries a sync type change collides with, before the upload (#297) (4c8f2c5)
• uploader: refuse the root of a Windows drive in checkRemoteRoot (765bd4d), closes #285
• uploader: walk through a source that is a symlink or a junction (#292) (bd0d409)

Documentation

• autotune: correct handshake locking explanation (#291) (13b2a90)