Summary
This release focuses on security hardening and stability improvements, including a fix for a command injection vulnerability in proxychains4, recovery of stale PostgreSQL connections, and updated Docker image glibc compatibility.
Fixes
- update Chinese translation rules for release notes sections by @samanhappy in #986
- sanitize proxychains4 command args to prevent RCE (fixes #911) by @zsxh1990 in #987
- bump adm-zip from 0.5.16 to 0.6.0 by @dependabot[bot] in #990
- recover stale PostgreSQL connections by @samanhappy in #991
- bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in #992
- bump js-yaml from 4.2.0 to 4.3.0 by @dependabot[bot] in #993
- bump hono from 4.12.25 to 4.12.27 by @dependabot[bot] in #996
- bump typeorm from 0.3.29 to 0.3.31 by @dependabot[bot] in #995
- bump postcss from 8.5.10 to 8.5.12 by @dependabot[bot] in #999
- update Docker image glibc compatibility by @samanhappy in #1000
摘要
此版本重点关注安全加固和稳定性改进，包括修复 proxychains4 的命令注入漏洞、恢复失效的 PostgreSQL 连接，以及更新 Docker 镜像的 glibc 兼容性。
修复
- 更新 release notes 章节的中文翻译规则 by @samanhappy in #986
- 清理 proxychains4 命令参数以防远程代码执行（修复 #911）by @zsxh1990 in #987
- 升级 adm-zip 从 0.5.16 到 0.6.0 by @dependabot[bot] in #990
- 恢复失效的 PostgreSQL 连接 by @samanhappy in #991
- 升级 axios 从 1.16.1 到 1.18.0 by @dependabot[bot] in #992
- 升级 js-yaml 从 4.2.0 到 4.3.0 by @dependabot[bot] in #993
- 升级 hono 从 4.12.25 到 4.12.27 by @dependabot[bot] in #996
- 升级 typeorm 从 0.3.29 到 0.3.31 by @dependabot[bot] in #995
- 升级 postcss 从 8.5.10 到 8.5.12 by @dependabot[bot] in #999
- 更新 Docker 镜像的 glibc 兼容性 by @samanhappy in #1000
New Contributors
References
- fix: update Chinese translation rules for release notes sections by @samanhappy in #986
- fix(security): sanitize proxychains4 command args to prevent RCE (fixes #911) by @zsxh1990 in #987
- chore(deps): bump adm-zip from 0.5.16 to 0.6.0 by @dependabot[bot] in #990
- fix: recover stale PostgreSQL connections by @samanhappy in #991
- chore(deps): bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in #992
- chore(deps): bump js-yaml from 4.2.0 to 4.3.0 by @dependabot[bot] in #993
- chore(deps): bump hono from 4.12.25 to 4.12.27 by @dependabot[bot] in #996
- chore(deps): bump typeorm from 0.3.29 to 0.3.31 by @dependabot[bot] in #995
- chore(deps-dev): bump postcss from 8.5.10 to 8.5.12 by @dependabot[bot] in #999
- fix: update Docker image glibc compatibility by @samanhappy in #1000
- Full changelog: v1.0.24...v1.0.25
Contributors
samanhappy, dependabot, and zsxh1990