Skip to content

v1.1.2

Choose a tag to compare

@whasamatau whasamatau released this 17 Jun 16:06
· 14 commits to master since this release
10a558a

Bug-fix + hardening release. Verified against TrueNAS-26.0.0-BETA.1. Full details in CHANGELOG.md.

Security

  • Fixed a response-filter bypass that returned sensitive fields (e.g. VM display passwords) in cleartext in tool-call responses. Resource reads were unaffected.

Fixed

  • The confirm gate is satisfiable again for create/update actions — confirm no longer leaks into strict upstream payloads (and is now a first-class top-level dispatcher field).
  • vm_device_create/vm_device_update nest dtype under attributes as current middleware requires.
  • dataset_set_permissions (was non-functional), replication_restore validation, vm_display_uri, vm_update, alertservice_test, and cpu_mode underscore tolerance.

Changed

  • Long-running @job actions return a structured descriptor instead of a bare job id.
  • Safety tiers tightened: iSCSI creates and the *_run family are now tier-2 (93 tier-2 / 157 tier-3).
  • Unknown params are dropped centrally (registry .strip()).