44.60.1

44.60.1 (2026-09-03)

Bug Fixes

• config: enforce allowedEnv when applying env vars (6b2b607)
• config: enforce allowedHeaders when applying headers (223e6ef)
• config: report top-level "security" violations for env (61cbc87)
• config: report top-level "security" violations for hostRules[].headers (ae34610)
• util/host-rules: apply the admin's headers over a repository's (4732da7)
• util/host-rules: enforce allowedHeaders within add() (c98f4f7)
• util/host-rules: merge headers across matching rules (3d56c38)
• workers/global: enforce allowedHeaders for the admin's own hostRules (432bb00)
• workers/repository: validate resolved presets (2382888)

Code Refactoring

• config: add requiresCheckAtTrustBoundary option flag (711d46b)

Tests

• config: add a reminder to add check for trust boundaries (c1a00f1)
• config: cover existing allowedEnv behaviour (6e0bbee)
• config: cover existing allowedHeaders behaviour (d088346)
• util/host-rules: cover existing header merging behaviour (9a91b69)
• workers/repository: don't mock more than we need to (cf491cc)
• workers/repository: set explicit allowedEnv (f189d93)