Skip to content

NTNT v0.5.6

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Oct 20:07
v0.5.6
e9dadc7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

NTNT v0.5.6

Task helpers, local TOTP enrollment QR codes, interpreter error recovery, and TLS/dependency security updates.

Upgrade notes

  • Update the NTNT binary for the security fixes. Updating CA certificates alone does not patch the embedded dependency versions.
  • Provide a usable host/container CA store. TLS inspection (tls_info), monitoring HTTPS probes (probe_fetch) and SMTP TLS now use the host trust store, without a bundled fallback. Linux/container images need ca-certificates or an explicitly configured store. Restart NTNT after changing the CA store or SSL_CERT_FILE / SSL_CERT_DIR; discovery is cached at first TLS use. Ordinary fetch and download continue using native/system TLS.
  • Struct field-only invariants now run inside tasks instead of being silently skipped. Invariants that call helpers or read outer constants remain unsupported there and fail clearly.
  • Failing user functions restore the caller's scope and contract context. Callee defers run in the callee's scope before the caller's error handler; nested calls preserve the caller's old() snapshot.
  • Upgrading from before 0.5.5: Redis job queues still require Redis 7.0+ or Valkey 7.2+, with coordinated writer/worker upgrades.

Highlights

  • Task closures can call application and imported NTNT helpers, including transitive and recursive calls. Captured state remains task-local; unsupported captures fail before task start.
  • std/concurrent.task_stats() exposes bounded, constant-time task-retention counts and estimated bytes without revealing task contents. These gauges are not process RSS.
  • std/auth.totp_qr_svg(uri) renders enrollment QR SVGs locally, without external requests. The QR still contains the enrollment secret: show it only during enrollment; never log, cache or send it to a third-party QR service.
  • Security updates include compromised eMudhra intermediate-key distrust, the dependency advisory backlog, ctutils 0.4.4 and Tokio 1.53.3. CI now monitors RustSec advisories and security-only dependency updates.

Complete release and upgrade notes · Installation and supported platforms · Full changelog

Download the archive for your platform and its matching .sha256 checksum. Published archives cover Linux x64, Linux ARMv7 hard-float, macOS ARM64 and Windows x64.

Assets 12
Loading