Skip to content

Releases

v0.7.0

Choose a tag to compare

@thenixan thenixan released this 06 Aug 13:54

What's Changed

  • feat: add server's static X25519 public key to deployment configuration by @thenixan in #7
  • feat: implement zip-slip protection in task output handling and add corresponding test by @thenixan in #8
  • feat: add support for Unix socket connections and implement corresponding tests by @thenixan in #9
  • fix: extend run_as privilege drop to all unix targets, not just linux by @thenixan in #10
  • fix: write generated private key files with owner-only (0600) permissions by @thenixan in #11
  • fix: bound the launch message and file-chunk waits with timeouts by @thenixan in #12
  • fix: replace panics with clean failures on malformed attachment bytes by @thenixan in #13
  • fix: cap zip entry count and decompressed size to stop zip-bomb attachments by @thenixan in #14
  • fix: recover output select! can strand when it races the task exit by @thenixan in #15
  • fix: reject non-contributory ECDH shared secrets in the e2e handshake by @thenixan in #16
  • chore: fix stale comment and delete dead unused-attachment-archive code by @thenixan in #17
  • fix: reject configs with duplicate client or script names by @thenixan in #18
  • fix: tolerate WS Ping/Pong frames during launch and file-chunk reads by @thenixan in #19
  • fix: remove Debug derive from ClientKey to prevent private key leaks by @thenixan in #20
  • fix: reject identical --private-key-output/--public-key-output paths by @thenixan in #21
  • fix: warn on stderr before printing a private key to stdout by @thenixan in #22

Full Changelog: v0.6.0...v0.7.0

v0.6.0

Choose a tag to compare

@thenixan thenixan released this 05 Aug 14:01

What's Changed

  • feat: implement end-to-end encryption for protocol version 2 by @thenixan in #6

Full Changelog: v0.5.1...v0.6.0

v0.5.1

Choose a tag to compare

@thenixan thenixan released this 04 Aug 18:42

What's Changed

  • Add support for multiple protocol versions and update related tests by @thenixan in #4
  • Remove orosu-client from the repository and clean up related build configurations by @thenixan in #5

Full Changelog: v0.5.0...v0.5.1

v0.5.0

Choose a tag to compare

@thenixan thenixan released this 04 Aug 17:39
7ebdb81

What's Changed

  • Js action by @thenixan in #1
  • Fix input argument name for orosu CI action in build workflow by @thenixan in #2
  • Add self-restart job to restart orosu-server after deployment by @thenixan in #3

New Contributors

Full Changelog: v0.4...v0.5.0