This release is just to fix bugs and fix a few reported security vulnerabilities.
Thanks to @alham-rizvi and @arpitjain099 for their security reports.
Changes
Fixed
- security vulnerability GHSA-3j7j-3hq5-h3rp; No audience check during RFC 8693 token exchange
- security vulnerability GHSA-7g73-5rrw-446p; Tree listing filters on the owner instead of the requester
- #283; long slugs will go out of bounds
Changed
- Bump deps
- add a minimum password length
- add some hosting documentation
Full Changelog: v1.0.1...v1.0.3
Contributors
arpitjain099 and alham-rizvi