Skip to content

Across Orchestrator v0.10.8

Choose a tag to compare

View all tags
@fantasyce fantasyce released this 21 Aug 06:40
v0.10.8
5393bf1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Relay security remediation release.

  • Refreshes Alpine packages in the final Relay image before runtime installation.
  • Resolves the SQLite vulnerabilities that correctly blocked v0.10.7 Relay publication.
  • Preserves the strict HIGH/CRITICAL Trivy publication gate, signed digest, SBOM, and provenance requirements.
  • Keeps the portable MCP schema, provenance, and sandbox hardening from v0.10.7.

Validated by 311 tests, 14 subtests, CLI smoke, sensitive-path scanning, uv lock consistency, package dry-run, CodeQL, and GitHub Quality CI. The tag targets the exact origin/main release commit.

Assets 9
Loading