Skip to content

v108.0.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Jun 19:17
v108.0.1
4c1e0a7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

108.0.1 (2026-06-27)

Bug Fixes

  • security: address bot review on GitHub install nonce (887e2f8)
  • security: harden GitHub state nonce per adversarial review (47de6a7)
  • security: inject JWT_VERIFICATION_TOKEN_SECRET in all prod/stage deploys (GHSA-chm8-2ggf-pgjq) (ee7a840), closes #9752
  • security: keep JWT_VERIFICATION_TOKEN_SECRET out of demo deploys (review feedback) (4ce4d7f)
  • security: require a server-minted state nonce for GitHub App installs (GHSA-4rwq-65wh-45h4) (e1ecc1a), closes #9754 #9754

What's Changed

  • fix(integration-plane): bind Plane proxy tenant to the session JWT by @evereq in #9747
  • fix(security): inject JWT_VERIFICATION_TOKEN_SECRET in all prod/stage deploys (GHSA-chm8-2ggf-pgjq) by @evereq in #9756
  • fix(security): require a server-minted state nonce for GitHub App installs (GHSA-4rwq-65wh-45h4) by @evereq in #9757

Full Changelog: v107.0.12...v108.0.1

Contributors

evereq
Assets 9
Loading