Skip to content

Talos 0.20.0-rc.2 — Security release candidate

Pre-release
Pre-release

Choose a tag to compare

View all tags
@morningstarnasser morningstarnasser released this 01 Nov 09:28
v0.20.0-rc.2
8375b89

RC.2 fixes seven high-severity advisories affecting the PDF parser included in RC.1. Upgrade is recommended for installations that process PDF documents.

  • Require and hash-lock pypdf 6.21.4, excluding affected versions. Other dependency versions remain unchanged.
  • Preserve the frozen operator contract, authorization boundaries and durable state.
  • Start a new deployed RC observation window. This is a prerelease, not stable 0.20.0.

Qualification: full suites on Python 3.12 and 3.13; native Linux/macOS CI; ARM64 Linux tests; real-model E2E; signed clean installation, RC.1→RC.2 upgrade and rollback on macOS/ARM64 Linux; fresh dependency and public-hygiene scans. These checks passed before publication. Native CI: https://github.com/talos-kernel/Talos/actions/runs/41291524692.

The attached archive is signed with the existing pinned Ed25519 key. SHA256 and detached signature are included; the installer verifies them before execution. Existing RC.1 assets remain unchanged for recovery. A desktop notarization or Windows-support claim is not part of this CLI release.

Assets 5
Loading