v1.3.0

What's Changed

• fix(proxy): bound SSH agent operations by dial timeout by @soulteary in #18
• fix(forward): bound default session resources by @soulteary in #22
• fix(container): run image as a non-root user by @soulteary in #21
• fix(proxy): reject conflicting multi-instance admin options by @soulteary in #17
• fix(proxy): reject HTTP Upgrade requests explicitly by @soulteary in #20
• fix(config): reject empty selected service sections by @soulteary in #16
• fix(proxy): handle Expect 100-continue without deadlock by @soulteary in #19
• test: remove macOS timing dependency from connection counter test by @soulteary in #23

Full Changelog: v1.2.0...v1.3.0

v1.2.0

What's Changed

• ci: replace external Go Report Card service by @soulteary in #1
• [P1] Harden CI and release supply chain by @soulteary in #4
• [P1] Bound fixed-request load tests by duration by @soulteary in #5
• [P1] Enforce HTTP proxy hop-by-hop header rules by @soulteary in #3
• [P0] Harden proxy resource and access boundaries by @soulteary in #2
• fix(deps): update x/crypto for SSH DoS fixes by @soulteary in #6
• chore: drop Windows support by @soulteary in #7
• fix(config): validate forward multi-instance options by @soulteary in #9
• fix(forward): share idle timeout across tunnel by @soulteary in #10
• fix(proxy): harden SSH upstream lifecycle by @soulteary in #11
• fix(stats): keep connection events consistent by @soulteary in #13
• feat(loadtest): add bounded samples and CI output by @soulteary in #14
• fix(proxy): bound HTTP handshakes independently by @soulteary in #12
• fix(forward): reject self-referential targets by @soulteary in #8
• docs: prepare v1.2.0 release by @soulteary in #15

New Contributors

• @soulteary made their first contribution in #1

Full Changelog: v1.1.0...v1.2.0

v1.1.0

Full Changelog: v1.0.0...v1.1.0

v1.0.0

Full Changelog: https://github.com/soulteary/portmap/commits/v1.0.0