Skip to content

Release v0.661.0

Latest
Latest

Choose a tag to compare

View all tags
@qlty-releases qlty-releases released this 22 Oct 03:05
· 1 commit to main since this release
Immutable release. Only release title and notes can be modified.
v0.661.0
3161717
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Bump the managed Node runtime to 22.23.4, which blocks the compromised eMudhra certificates and fixes the October 2026 Node security releases, including a Brotli out-of-bounds write (CVE-2026-111497) that allows remote code execution (#2960)
  • Bump the managed Python runtime to 3.11.17 so Python plugin installs (such as ruff, black, and semgrep) use pip 26.2.2, which rejects the compromised eMudhra certificate authorities (#2964)
  • Reject credentials sent over plain HTTP to non-local hosts and stop following HTTP redirects in the qlty-slop-one LLM client (#2963)
Assets 19
Loading