Skip to content

FreshGuard Core v0.11.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Feb 05:54
· 42 commits to main since this release
v0.11.3
5970ee2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

FreshGuard Core v0.11.3

Security Features ✅

  • Package Integrity: Signed with cosign using keyless signing
  • Supply Chain Security: SBOM included for transparency
  • Vulnerability Scanning: Scanned for known vulnerabilities
  • Open Source: MIT licensed, no proprietary dependencies

Installation

pnpm install @freshguard/freshguard-core@0.11.3

Security Verification

Verify package signature:

# Download signature bundle from this release
cosign verify-blob --bundle freshguard-freshguard-core-0.11.3.tgz.cosign.bundle \
  --certificate-identity-regexp=".*" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  freshguard-freshguard-core-0.11.3.tgz

What's Changed

What's Changed

  • feat: add comprehensive SECURITY.md with threat model documentation by @mandakan in #32
  • fix: override fast-xml-parser to address CVE-2026-25128 by @mandakan in #33
  • chore: migrate from thias-se to freshguard-dev org by @mandakan in #34
  • chore: update dependencies and bump version to 0.11.3 by @mandakan in #35

Full Changelog: v0.11.1...v0.11.3

Contributors

mandakan
Assets 7
Loading