Skip to content

v0.2.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Aug 10:29
· 64 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.2.9
4e5b8f3
This commit was signed with the committer’s verified signature.
frathe Florian Rathe
SSH Key Fingerprint: xnLxS8k1BDq8KsSHjg7p8lFFAF0GEA0c/VXimICfCSY
Verified
Learn about vigilant mode.

What's Changed

Bugfix

  • Reject zip/tar entries that are not filepath.IsLocal during update extract (GitHub CodeQL go/zipslip).

Internal

  • Drop deprecated tar.TypeRegA in update extract (still accept the historic NUL regular-file typeflag).
  • Install CI's Linux GUI packages in CodeQL so internal/winpos/linux.go can compile.

Full Changelog: v0.2.8...v0.2.9

Assets 9
Loading