Skip to content

v0.79.1

Choose a tag to compare

View all tags
@steipete steipete released this 21 Oct 08:13
· 50 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.79.1
This tag was signed with the committer’s verified signature.
steipete Peter Steinberger
SSH Key Fingerprint: WmI9lVtd7F2c5XyRHbZVO3yYYJzwsSNzcZQMPT147HI
Verified
Learn about vigilant mode.
74fe694
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.79.1 - 2026-10-20

Highlights

  • Patch certificate validation across Go builds. Source, release binaries, container runners, and developer-image toolchains now select Go 1.27.3 to fix GO-2026-6809, retaining the Go 1.26 minimum.

  • Local Actions hydration: hydrate detached source mirrors from a verified published ancestor with only a local base ref, preserving selected-file exclusions during cold sync. PR 2916. Thanks @shakkernerd.

  • Local Actions hydration: prepare cold unpublished detached sources from a verified published ancestor while preserving selected files, privacy filters, and repository identity checks. PR 2914. Thanks @shakkernerd.

Fixed

  • Security: build source, release binaries, container runners, and developer-image toolchains with Go 1.27.3 to fix reachable GO-2026-6809 certificate validation, retaining the Go 1.26 minimum.
  • Cloudflare Dynamic Workers: cancel stalled response reads at their deadline instead of blocking while closing the response body.
  • Run: verify forwarded environment file removal after cleanup failures, preserve success when only the staging directory remains, and distinguish present files from unconfirmed removal. PR 2917. Thanks @mr3od.

Contributors

mr3od and shakkernerd
Assets 11
Loading