Skip to content

v0.24.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Jun 00:50
v0.24.0
ac2cb1a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • build(deps): bump github.com/ipfs/boxo from 0.38.0 to 0.39.0 in /storage/bsadapter by @dependabot[bot] in #628
  • build(deps): bump github.com/ipfs/boxo from 0.38.0 to 0.39.0 in /storage/bsrvadapter by @dependabot[bot] in #627
  • build(deps): bump github.com/polydawn/refmt from 0.89.1-0.20231129105047-37766d95467a to 0.90.0 by @dependabot[bot] in #629
  • feat(dagcbor): enforce strict decode defaults by @rvagg in #630
    • Enable stricter DAG-CBOR decode checks by default using refmt's canonical-form options. Reject indefinite-length CBOR in all modes, and reject non-minimal CBOR heads, NaN, infinity, and duplicate map keys by default.
    • Add RelaxedDecode as an opt-out for legacy non-canonical inputs while leaving known remaining gaps explicit: map key order and non-64-bit float encodings are still accepted for now.

Full Changelog: v0.23.0...v0.24.0

Contributors

rvagg and dependabot
Assets 2
Loading