v1.1.2
Bug-fix + hardening release. Verified against TrueNAS-26.0.0-BETA.1. Full details in CHANGELOG.md.
Security
- Fixed a response-filter bypass that returned sensitive fields (e.g. VM display passwords) in cleartext in tool-call responses. Resource reads were unaffected.
Fixed
- The confirm gate is satisfiable again for create/update actions —
confirmno longer leaks into strict upstream payloads (and is now a first-class top-level dispatcher field). vm_device_create/vm_device_updatenestdtypeunderattributesas current middleware requires.dataset_set_permissions(was non-functional),replication_restorevalidation,vm_display_uri,vm_update,alertservice_test, andcpu_modeunderscore tolerance.
Changed
- Long-running
@jobactions return a structured descriptor instead of a bare job id. - Safety tiers tightened: iSCSI creates and the
*_runfamily are now tier-2 (93 tier-2 / 157 tier-3). - Unknown params are dropped centrally (registry
.strip()).