Repository navigation
v0.2.0
Release v0.2.0
This release introduces a major overhaul of the hook execution system by replacing the insecure system() call with a robust fork()/execvp() implementation, as introduced in PR #1.
This change provides significant improvements in security, reliability, and the developer experience.
Key Improvements
-
Enhanced Security:
Mitigates shell injection vulnerabilities by removing the use of the system shell for hook execution. -
Developer-Friendly Error Reporting:
Provides precise and actionable feedback, making it much easier to debug hook script issues:- Logs a specific ERROR if a script is not found.
- Logs a specific ERROR if a script is found but not executable.
- Clearly reports the script's own exit code if it fails during execution.
-
Improved Efficiency:
Spawns new processes directly without an intermediate shell, resulting in better performance. -
Cleaner Log Output:
A success message is now logged only after a script has run and exited successfully, reducing unnecessary console noise.
Full Changelog: v0.1.0...v0.2.0