Skip to content

PaddleBoard v0.3.1

Latest
Latest

Choose a tag to compare

View all tags
@jasonsmithio jasonsmithio released this 31 Oct 23:33
· 79449 commits to main since this release
v0.3.1
e10fd0f

PaddleBoard v0.3.1

The first fix release of the public beta: two sandbox fixes, prompted by a crash test a beta user suggested, a Vim and Helix keymap fix, and four security updates.

Sandbox

  • Fixed sandboxed commands, services, MCP servers and notebook kernels that kept running,
    and kept their ports, after PaddleBoard crashed or was force-quit. PaddleBoard now
    removes them the next time it starts.
  • Added a notice after a crash in the middle of a sandboxed command, naming the command and
    its folder so you can check for half-written files. The command is never re-run.

Editor

  • Fixed Vim and Helix mode loading none of their key bindings, because one binding pointed
    at an action that no longer exists.
  • Fixed the macOS window buttons overlapping the tab bar's back and forward arrows on some
    macOS versions, and the tab bar's bottom line stopping short under the window buttons.
  • Added Spotter to the first-launch tour. Existing users see a "tour has new sections" notice.

Security

  • Fixed four security issues in the TLS library (rustls 0.23.46), including TLS session
    secrets that could appear in debug output.
  • Fixed the bundled fallback certificate store still trusting the emSign ECC Root CA - G3,
    whose intermediate CAs had their private keys compromised. It is only used when the
    system's certificate store cannot be loaded.
  • Fixed a crash when an extension receives a component-model stream with a different
    payload type than it expects (wasmtime 48.0.7, GHSA-9pvw-hwfg-92h5).
Assets 6
Loading