Skip to content

purple-wolf v0.4.4

Choose a tag to compare

@github-actions github-actions released this 10 Jul 21:17

Purple Wolf v0.4.4 is a compatibility-preserving performance, security, and
release-engineering update for the Traefik WASM WAF and webhook relay.

Highlights

  • Removes the TOML parser stack from the JSON-only Traefik guest while keeping
    TOML support enabled by default for purple-wolf-core users.
  • Removes an allocation from browser User-Agent SQLi suffix inspection and
    trims unused Tokio, Hyper, core, and TOML dependencies from the relay.
  • Updates quinn-proto to 0.11.15 to resolve RUSTSEC-2026-0185.
  • Uses locked dependency graphs for release/container builds and modernizes
    CI, Pages, artifact, and Docker actions to their current Node 24 majors.
  • Expands no-default-feature, package, workflow, deployment, fuzz, Docker, and
    homelab validation while preserving existing WAF defaults and behavior.

Compatibility

WAF configuration and request-handling behavior are unchanged. Default
purple-wolf-core users retain Config::parse; consumers that disable default
features must enable toml-config when they need TOML parsing.

Artifacts

The release includes the Traefik WASM module, Linux and macOS relay binaries,
the Helm chart, container-image SBOMs, checksums, keyless signatures and
certificates, and a signed release manifest.

Full changelog: v0.4.3...v0.4.4