Repository navigation
Releases
Releases · orosu-ci/server
v0.7.0
What's Changed
- feat: add server's static X25519 public key to deployment configuration by @thenixan in #7
- feat: implement zip-slip protection in task output handling and add corresponding test by @thenixan in #8
- feat: add support for Unix socket connections and implement corresponding tests by @thenixan in #9
- fix: extend run_as privilege drop to all unix targets, not just linux by @thenixan in #10
- fix: write generated private key files with owner-only (0600) permissions by @thenixan in #11
- fix: bound the launch message and file-chunk waits with timeouts by @thenixan in #12
- fix: replace panics with clean failures on malformed attachment bytes by @thenixan in #13
- fix: cap zip entry count and decompressed size to stop zip-bomb attachments by @thenixan in #14
- fix: recover output select! can strand when it races the task exit by @thenixan in #15
- fix: reject non-contributory ECDH shared secrets in the e2e handshake by @thenixan in #16
- chore: fix stale comment and delete dead unused-attachment-archive code by @thenixan in #17
- fix: reject configs with duplicate client or script names by @thenixan in #18
- fix: tolerate WS Ping/Pong frames during launch and file-chunk reads by @thenixan in #19
- fix: remove Debug derive from ClientKey to prevent private key leaks by @thenixan in #20
- fix: reject identical --private-key-output/--public-key-output paths by @thenixan in #21
- fix: warn on stderr before printing a private key to stdout by @thenixan in #22
Full Changelog: v0.6.0...v0.7.0