Skip to content

v1.0.0

Choose a tag to compare

View all tags
@thilak-rao thilak-rao released this 27 Jun 22:57
· 87 commits to main since this release
v1.0.0
47138ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Enforce MAX_UPLOAD_BYTES on uploads (returns 413 over the limit). It was documented before this release but never actually checked.
  • Compare the admin token in constant time.
  • Reject path-traversal and malformed cache hashes, and require an integer Content-Length.

Build and CI

  • Run the container as a non-root user; pin the Bun base image to 1.3.14-alpine by digest.
  • Publish to GHCR from CI: a push to main gives :latest and :sha-<short>; version tags give :X.Y.Z and :X.Y.
  • Dependabot now also watches GitHub Actions and Docker, not just Bun dependencies.

Maintenance

  • Upgrade dev dependencies to latest. Add AGENTS.md as the shared agent guide.

Pull: docker pull ghcr.io/thilak-rao/nx-cache-server-bun:1.0.0

Assets 2
Loading