Skip to content

v0.12.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Aug 12:28
· 5 commits to main since this release
v0.12.1
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: BsdGvKi3Med56Wy4VisZQhWin20c4hORHHUxNM9bVlw
Verified
Learn about vigilant mode.
f06d465
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

  • chore(release): v0.12.1 (#118)
  • fix(login): keep the passkey autofill ceremony usable and stop the false failure (#116)
  • Point CODEOWNERS at a team that exists (#115)
  • Assert the exact learn-more URL instead of a substring (#114)
  • ci: sync checks.yml gate job from the org template (#111)
  • chore(deps): allow the composer-normalize plugin (#108)
  • feat(rector): add the TYPO3 v13 level set (#110)
  • ci: sync checks.yml gate job from the org template (#109)
  • ci: upload coverage to Codecov again (#107)
  • feat(rector): enable rector with the shared org config (#106)
  • docs: state the commit-signing requirement where contributors look (#105)
  • style(test): name the positional parameters in the ddev hook test (#104)
  • ci: sync labeler fork-PR fix from typo3-extension template (#103)
  • chore(zizmor): drop the local policy copy, the reusable supplies it (#102)
  • docs: sync the scanner wording from the template (#101)
  • ci: drop the deprecated GITLEAKS_LICENSE secret mapping (#100)
  • ci: add gitleaks and zizmor scanners to checks.yml (#99)
  • fix(login): stop decoy credential IDs from encoding their own shape (#98)
  • test(ddev): cover the ref-name sanitization in CI (#97)
  • chore: exclude development files from the release archive (#96)
  • fix(controller): return 400 instead of crashing on a non-UTF-8 request body (#95)
  • fix(ddev): treat git ref names as untrusted in the local dev tooling (#94)
  • fix: address nine security-scan findings (switch-user escalation, Sudo Mode, token expiry, enumeration oracles) (#93)

Installation

composer require netresearch/nr-passkeys-be

Publication status

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-passkeys-be-0.12.1.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-passkeys-be-0.12.1.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

Assets 12
Loading