nest 0.8.2
GitHub authentication
Fixed token handling for custom repository hosts.
In nest 0.5.0 through 0.8.1, when GHE_TOKEN was set and no host-specific token was resolved from registries, nest could attach GHE_TOKEN to requests for repository hosts other than github.com.
Version 0.8.2 removes this implicit fallback. Custom repository hosts now receive an authorization token only when explicitly configured in registries.
Requests to github.com and to the intended GitHub Enterprise Server were not affected by unintended token disclosure.
For affected conditions and mitigation details, see the security advisory:
GHSA-62fj-56pc-cpgc
Full Changelog:
0.8.1...0.8.2