Skip to content

Release v1.11.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Oct 09:34
· 22 commits to main since this release
v1.11.0
32a8b22

Release v1.11.0: fixes - SQL dedup kept with ignore_pure_access_denied false, segment-bounded uptime paths, no PII in failure logs.

Changelog

Security

  • uptime_bot_listener.paths: a configured path now matches only itself and its sub-paths on a / segment boundary (/health covers /health/db), no longer sibling paths sharing the prefix (/healthz-admin, /health-admin), which previously short-circuited to 200 OK for any bot-like User-Agent.
  • SentryErrorReporter::setUser() / setContext(): when Sentry fails, the error log now records only the keys (user_data_keys, context_keys) instead of the full user data / context values, so PII and secrets no longer leak into application logs.

Fixed

  • BeforeSendHandler: setting ignore_pure_access_denied: false no longer disables deduplicate_sql_exceptions; the flag now only gates the access-denied filter.

Full Changelog: v1.10.3...v1.11.0

Assets 2
Loading