Skip to content

v3.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Oct 13:52
· 22 commits to main since this release
v3.0.0
6eb3d76

Changelog

📘 Subtasks

deps

  • f5f0159 update kestra gradle & researchgate

version

  • 6eb3d76 update to version 'v3.0.0'.
  • 7dc64f9 update snapshot version 'v2.0.6-SNAPSHOT'.

🐛 Bug Fixes

graalvm

  • 2db4b41 🚨 make internal resources read-only for scripts (#99) - *scripts can no longer use java.io.File, FileOutputStream,
    java.nio.file or Java.addToClasspath(), nor read files outside the working
    directory. Upload content with runContext.storage().putFile(InputStream, name).

Closes #8

  • fix(graalvm): harden working directory path checks and host class denials

  • fix(graalvm): make internal resources read-only for scripts

Serve the engine resource cache and language homes through a read-only view, and deny the io.kestra.core.models.tasks.runners host lookup.

  • fix(graalvm): resolve symlinked working dirs for internal resources routing

Follow symlinks when deciding whether a path belongs to the working directory, and report a clear message when a path outside it is denied.

  • fix(graalvm): resolve relative paths against the working dir cwd and tighten tests

Resolve relative paths handed to the internal resources view against the working directory current directory, derive the Python stdlib path at runtime, and rename tests to match what they check.

  • fix(graalvm): tighten chdir regression test and shorten comment

---------*, closes #8 #99

Contributors

We'd like to thank the following people for their contributions:
Arnav Panicker, François Delbrayelle, GitHub, Ludovic DEHON, jymaire

Assets 9
Loading