Skip to content

Pinakes v0.7.59

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Aug 10:49
· 285 commits to main since this release
v0.7.59
057552a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Consolidation release: the complete integration of PRs #335, #337, #339 and
#340, hardened together with the fixes found during their combined review and a
security pass. Validated through three release candidates.

Fixes

  • Loan and reservation state, availability and date handling now use the same
    guarded production paths across the web UI, mobile API and background jobs.
  • Orphan plugin hooks are disabled reversibly and the regression test creates
    its own foreign-key-safe fixture, including on a completely fresh database.
  • Framework-generated error responses receive the same nonce-based Content
    Security Policy as normal pages.
  • Review findings covering migration selection, fixture cleanup, SweetAlert
    confirmation, localization parity, generated assets and accessibility have
    regression coverage.

Release verification

  • The exact distributable is installed and exercised through the full E2E and
    four-shard browser regression suites.
  • Chromium, Firefox and WebKit run accessibility/runtime checks; OWASP ZAP
    blocks medium/high passive-scan findings.
  • PHP 8.2–8.5, MySQL 8.0/8.4 and MariaDB 10.11/11.4 are verified, together with
    fresh installs in all five bundled locales and the complete upgrade chain.
  • Static analysis, dependency/secret/vulnerability scans, reproducible archive
    checks, SPDX SBOM and provenance are mandatory release gates.

The ZIP was built twice with an identical SHA-256, audited as the
exact distributable, accompanied by an SPDX SBOM, and signed with
a GitHub artifact provenance attestation.

Assets 6
Loading