Skip to content

v1.23.4: Non-breaking hardening ISS-01..ISS-18 with opt-in warnings and strict modes

Choose a tag to compare

View all tags
@hapheus hapheus released this 06 Nov 16:43
· 6 commits to main since this release
v1.23.4
9d4591e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Non-breaking hardening for ISS-01..ISS-18 (opt-in warnings, strict modes, example pins, best-effort hardening, internal refactor). Closes #218 #219 #220 #221 #222 #223 #224 #225 #226 #227 #228 #229 #230 #231 #232 #233 #234 #235.

Backward Compatibility

No env var, label, endpoint, CLI flag, or mount path renamed/removed. Defaults unchanged. New behavior opt-in or warn-only. Downgrade to v1.23.3 remains zero-downtime compatible.

New opt-ins

  • DASHBOARD_AUTH_REQUIRED=true (ISS-02)
  • PRESERVE_MANUAL_ROOTS=true (ISS-08)
  • TOMBSTONE_PERSISTENCE_ENABLED=true (ISS-11)
  • SYNC_HEARTBEAT_ENABLED=true (ISS-14)

Verification

375 passed, ruff clean, ruff format clean, mypy success.

Assets 2
Loading