Skip to content

v1.1.2

Latest

Choose a tag to compare

@github-actions github-actions released this 19 Oct 01:54
· 23 commits to main since this release

Completes the 1.1.1 security fix for Windows. Please upgrade.

Security

  • Windows: CLIs installed by npm (vercel, wrangler, ...) no longer start a node found in the current folder. npm's
    .cmd shims run node by name when no node.exe sits beside them, and Windows looked for it in the current folder
    first. cloudpin now tells Windows not to search the current folder for any process it starts, including the command
    cloudpin exec runs, as PowerShell and Git Bash already do
    (GHSA-3cf7-5v5w-q5vr).

Verify this release

cloudpin-1.1.2.tgz is the exact file npm serves (npm packs reproducibly), built and signed by this repository's
release workflow. To check a download:

gh attestation verify cloudpin-1.1.2.tgz --repo paureis/cloudpin   # signed build provenance
sha256sum -c SHA256SUMS                                            # checksum
npm view cloudpin@1.1.2 dist.integrity                             # npm's sha512 for the same file