Skip to content

v0.46.1

Choose a tag to compare

View all tags
@hughpyle hughpyle released this 18 Feb 18:51
· 909 commits to main since this release
v0.46.1
f3962d1

Security hardening and API consistency fixes.

  • Part immutability: parts (@P{N}) are now guarded — put, delete, revert, move reject part IDs. New tag_part() allows tag corrections on parts.
  • Security: URL-encode IDs in remote client paths (prevents path traversal). Atomic config file creation with restricted permissions (eliminates race condition).
  • Protocol sync: 7 stale protocol signatures updated to match implementations.
  • Validation: validate_id() added to put() inline mode and move(). casefold_tags() in move() tag filters.
Assets 2
Loading