Skip to content

v0.10.2 - Security Hardening & Test Improvements

Choose a tag to compare

@mariotoffia mariotoffia released this 31 Jan 10:13
· 5 commits to main since this release

What's Changed

Security Improvements

  • HMAC-SHA256 receipt handle signing - Prevents tampering with receipt handles
  • Message size validation - Enforces 256KB limit with clear error messages
  • Deferred validation pattern - Configuration validated at operation time

Bug Fixes

  • Fixed poll timeout semantics (timeout=0 no longer skips database queries)
  • Fixed test infrastructure for reliable Docker container cleanup
  • Added signal handling (SIGINT/SIGTERM) for graceful test shutdown

Test Infrastructure

  • Comprehensive test coverage for security and validation
  • Context cancellation propagation tests
  • Backoff strategy tests
  • Improved CI workflows with golangci-lint configuration

Code Quality

  • Split large files to improve maintainability (<500 LOC per file)
  • Added .golangci.yml configuration

Full Changelog: v0.10.1...v0.10.2