What's Changed
- deps: pin the pre-release MCLI source by @Vonng in #9
- deps: pin the remote env scheme repair by @Vonng in #10
- ci: test the upstream package floor on a coherent module graph by @Vonng in #11
- Prepare the next release and migrate to silo-pkg v3.13.0 by @Vonng in #38
- Stabilize TestCafe role session capture by @Vonng in #39
- Finalize the SILO Console v2.3.0 candidate by @Vonng in #40
- test: stabilize rewind route coverage by @Vonng in #41
- release: simplify the v2.3.0 publish path by @Vonng in #42
Full Changelog: v2.2.1...v2.3.0
Changelog
- b8c7cdf build: align frontend credits with the Linux release runner
- 269d1f8 build: generate and verify the downstream replacement block
- 3158d1d build: regenerate embedded assets for the anonymous-browsing fix
- c25ae20 build: regenerate embedded assets for the fix round
- 43f8447 build: regenerate embedded assets for the round-2 fixes
- 73bb584 build: regenerate embedded assets for the second fix round
- 9f5ff85 ci: model an embedder that inherits no SILO replacement
- 5ca7062 ci: require the complete validation matrix for tagged releases
- a322f0e ci: test the upstream package floor on a coherent module graph
- 5826cd3 deps: migrate to silo-pkg v3.13.0 and mc 0901
- e80146f deps: pin the pre-release MCLI source
- f6f0b09 deps: pin the remote env scheme repair
- 60b05d7 fix: accept GNU cpio absolute-path warning after RPM validation
- 444c371 fix: bind object browser requests and actions to one validated identity
- a3a9dec fix: check rejected generated-client responses for an expired session
- c0fd252 fix: close diagnostic WebSockets with their page and bound the log buffer
- 6f3b890 fix: count an upload as running only once its request is in flight
- ecc8a0f fix: detect an expired session on generated methods without a response format
- a6ed816 fix: extract RPM payloads inside the verification root
- f1f4042 fix: keep anonymous public-bucket browsing out of the session-expiry path
- 19446a3 fix: match IAM resources with wildcard semantics instead of regular expressions
- cfcc7d5 fix: preserve MinIO certificate-manager embed compatibility
- 7d04481 fix: release upload references on abort, network failure and setup errors
- d285bc5 fix: settle queued uploads on cancel without relying on an abort event
- 4affd77 fix: unify session expiry and current-user identity across API clients
- 7697b9b release: finalize the v2.3.0 Console candidate
- 4610326 release: gate tags on a certified candidate and released dependencies
- 2a25fde release: ship license, notice, credits and exact provenance in every artifact
- a18b13c release: simplify the v2.3.0 publish path
- f66c388 security: bound and validate Object Manager WebSocket sessions
- 5a99940 security: cap WebSocket connections per process, per client and for anonymous peers
- b923a3d security: keep anonymous WebSocket caps strictly below the shared caps
- 96783cf security: redact credentials from debug and audit logs
- e1ebfad security: trust forwarding headers only from configured proxies
- f9d561d security: verify TLS peers on every outbound connection
Contributors
Vonng