Skip to content

Krillswitch v0.1.2

Choose a tag to compare

View all tags
@steipete steipete released this 27 Jul 12:34
· 139 commits to main since this release
v0.1.2
This tag was signed with the committer’s verified signature.
steipete Peter Steinberger
SSH Key Fingerprint: buNEi6/r+uo+ILUkRvDkyyOc+SQ8kjWzo0lh99ci8NM
Verified
Learn about vigilant mode.
595009e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Krillswitch 0.1.2 hardens production authentication around Cloudflare Access and ships React Router's RSC action CSRF fix.

Fixed

  • Update reusable Cloudflare Access policies through their account-level API so repeat admin deployments remain idempotent.

Security

  • Accept verified Cloudflare Access JWTs as production dashboard identities, avoiding a redundant GitHub OAuth login after the Access gate.
  • Default the admin Cloudflare Access policy to the OpenClaw GitHub organization instead of the openclaw.ai email domain.
  • Update React Router to 8.3.0 to resolve GHSA-qwww-vcr4-c8h2, an RSC action CSRF bypass advisory.

Changed

  • Refresh eligible workspace dependencies and pinned official GitHub Actions revisions while preserving the deliberate Sharp override.
  • Stabilize process-heavy CLI integration tests under loaded runners without weakening their build-and-execute assertions.

Distribution

Krillswitch is released as a GitHub application repository. Its workspace packages remain private; no npm package is published.

Full details: CHANGELOG.md

CI proof: release PR #41 and dependency PR #40

Assets 2
Loading