You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
1.0.2 | Mar 06 2026:
[Fix] SMTP relay credentials no longer visible in process listing;
_alert_email_relay uses curl -K config file (chmod 600, cleaned after
use) instead of --user command-line argument; follows same security
pattern as _alert_telegram_api
[Fix] Webhook URLs containing embedded tokens (Slack incoming webhooks,
Discord webhooks) redacted in _alert_curl_post error messages;
new _alert_redact_url helper strips token portion from known webhook
URL patterns before logging to stderr
[Change] _alert_email_relay adds -s (silent) flag to curl for consistency
with _alert_curl_post and _alert_telegram_api
[New] Tests for SMTP config file credential hiding, URL redaction of
Slack/Discord webhooks, and curl_post error message verification