Skip to content

v0.11.5

Latest
Latest

Choose a tag to compare

View all tags
@biow0lf biow0lf released this 08 Sep 18:09
· 79 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.11.5
fa7ae71
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.11.5

Stack updates

  1. Update rubygems from 4.0.18 to 4.0.19 by @biow0lf in errbit/errbit#3103
  2. Update bundler from 4.0.18 to 4.0.19 by @biow0lf in errbit/errbit#3103
  3. Update thruster gem from 0.1.25 to 0.1.26 by dependabot in errbit/errbit#3101

New features

  1. Configure HTTP Permissions Policy by @biow0lf in errbit/errbit#3108

Security

  1. Enable a strict application-wide Content Security Policy with per-request nonces and CSP-compatible UI behavior by @mikelolasagasti in errbit/errbit#3109
  2. Update omniauth-google-oauth2 gem from 1.2.2 to 1.2.3 by dependabot in errbit/errbit#3122
  3. Fix XSS in comment notification email by @mikelolasagasti in errbit/errbit#3094. GHSA-623h-px8r-9643. CVE is pending.
  4. XSS via notice backtrace file path. Fixed by @mikelolasagasti in errbit/errbit#3109. GHSA-p452-6f7x-vcqx. CVE is pending.

Thanks

  1. @saidM for reporting GHSA-p452-6f7x-vcqx.
  2. @mikelolasagasti for helping with the new release. By the way, welcome to the team!

Contributors

biow0lf, mikelolasagasti, and saidM
Assets 3
Loading