v2.25.1

Changelog

Bug Fixes

• e9d8dc0: fix(ci): gosec can fail, and the security tools are pinned (@jp1337)
• c86c922: fix(ci): the Debian job's version check can fail (@jp1337)
• 95a82c9: fix(ci): the console subcommands' tests run again (@jp1337)
• 5ce1860: fix(config): an explicitly empty health_allow beats EASYWALL_WEB_HEALTH_ALLOW (@jp1337)
• a308d7a: fix(config): web.toml and the schema counted four and two outbound requests (@jp1337)
• 25ee559: fix(core): "pending" means what /apply lists, and the preview reads a port's scope (@jp1337)
• 13720db: fix(core): PANIC and RESUME are refused from any peer that is not root (@jp1337)
• 17e1a87: fix(core): resume says what it did, and audits only a panic mode it ended (@jp1337)
• b1ae937: fix(core): a missing acceptance.duration is 120, and 0 is clamped like any out-of-range value (@jp1337)
• f1a8dc2: fix(core): a window's outcome is decided once, and every cancel says who ended it (@jp1337)
• 0c2e445: fix(core): an unconfirmed apply cannot outlive a dead core, and the outcome stays readable (@jp1337)
• b70375f: fix(core): forwarded traffic alone no longer reads as a stateful_dead firewall (@jp1337)
• 173006e: fix(core): the usage ticker follows a SIGHUP-reloaded [usage] interval (@jp1337)
• 6821491: fix(debian): a failed upgrade no longer leaves the firewall disabled (@jp1337)
• c00d57c: fix(debian): a package operation resets the start limit, so the core comes back after an upgrade (@jp1337)
• 0eebac1: fix(debian): the config templates' mode is the one that ships (@jp1337)
• 14c0fe3: fix(deps): update module github.com/go-chi/chi/v5 to v5.4.0 (@renovate[bot])
• 6da7f3a: fix(deps): update module golang.org/x/crypto to v0.58.0 (@renovate[bot])
• 00d3e0a: fix(deps): update module golang.org/x/sys to v0.49.0 (@renovate[bot])
• ee61765: fix(deps): update module golang.org/x/text to v0.43.0 (@renovate[bot])
• 311fc94: fix(docs): the command line has a fourth flag and five subcommands (@jp1337)
• a4a8913: fix(i18n): delete eight locale keys nothing renders (@jp1337)
• ce3113e: fix(i18n): the dashboard tile said the blocklist drops before any rule (@jp1337)
• 992ee0a: fix(i18n): the list pages promised an order the input chain does not have (@jp1337)
• 9215c5c: fix(renovate): the regeneration notes say when the step can happen (@jp1337)
• 81eb32b: fix(schema): docker.enabled defaults to true, and fr is a valid language (@jp1337)
• 9a33104: fix(systemd): the web interface survives a stopped core (@jp1337)
• a716504: fix(web): 2FA enrolment accepts a pasted code with a space around it (@jp1337)
• 4ba8c27: fix(web): a form the server could not read no longer saves an empty list (@jp1337)
• 932d6ff: fix(web): a list that starts with a blank line keeps it (@jp1337)
• 4aa9778: fix(web): a session ends ten minutes after last use, as privacy.md says (@jp1337)
• 9296f46: fix(web): choosing a file in "Import rules" imports it again (@jp1337)
• 52bade5: fix(web): key the login budget per IPv6 /64, bound its map, hash one password at a time (@jp1337)
• d32b968: fix(web): the forwarding page's rule counter follows added and removed rows (@jp1337)
• 337e7f4: fix(web): the generic rollback toast no longer says timeout for a core that died (@jp1337)
• 357bd1d: fix(web): the limiter's ceiling refuses instead of evicting; a sign-in waits 5 s for the hash slot (@jp1337)
• 57f2d5d: fix(web): the login limiter allows 5 rounds in any ten minutes, not 9 (@jp1337)

Other

• cac2a83: Merge remote-tracking branch 'origin/renovate/github.com-go-chi-chi-v5-5.x' into release/2.25.1 (@jp1337)
• 45dcea5: Merge remote-tracking branch 'origin/renovate/golang.org-x-crypto-0.x' into release/2.25.1 (@jp1337)
• 4d64a8f: Merge remote-tracking branch 'origin/renovate/golang.org-x-sys-0.x' into release/2.25.1 (@jp1337)
• de1bdba: Merge remote-tracking branch 'origin/renovate/golang.org-x-text-0.x' into release/2.25.1 (@jp1337)
• bcf32ef: Merge remote-tracking branch 'origin/renovate/mermaid-12.x-lockfile' into release/2.25.1 (@jp1337)
• 34c6765: Merge remote-tracking branch 'origin/renovate/playwright-monorepo' into release/2.25.1 (@jp1337)
• ca3362d: chore(deps): dompurify 3.4.17 and katex 0.18.11, diagrams re-rendered by mermaid 12.1.0 (@jp1337)
• 21ca5c9: chore(deps): update dependency mermaid to v12.1.0 (@renovate[bot])
• 77c1552: chore(deps): update dependency playwright-core to v1.64.0 (@renovate[bot])
• 5fa81eb: chore(go): update go toolchain to v1.27.2 (@renovate[bot])
• 3786375: release: 2.25.1 — what looked right and did nothing (@jp1337)
• aea10aa: test(ci): the gosec job can fail and no workflow tool floats (@jp1337)
• c2f7468: test(web): the refused-login log check reads a buffer the audit goroutine also writes (@jp1337)