Skip to content

cc-connect-next v0.3.0-beta.5

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 07 Sep 08:48
· 1 commit to main since this release
3384864

cc-connect-next v0.3.0-beta.5

中文

v0.3.0 的第五个 Beta,修复反馈隐私、错误反馈入口和更新备份边界,并采用
Foundation v0.1.2 正式补丁版本。

主要变化

  • 反馈脱敏更完整。 JSON/配置中的引号键、转义值、带前缀凭据、Cookie、URL
    用户信息和宿主标识会在内容截断与提交前脱敏,同时保留正常 URL 查询参数和片段。
  • 错误反馈绑定发起用户。 群聊共享会话中的自动反馈入口只能由原发起者使用;
    多工作区和固定工作目录场景也能正常触发。时间未知或来自未来的上下文不会混入反馈。
  • Relay 输入与认证保护。 拒绝无效 UTF-8,GitHub App 认证与 API 请求不跟随
    HTTP 重定向。使用自托管 Relay 的用户需更新并自行部署对应源码才能获得这些保护。
  • 更新恢复更可靠。 Unix Beta 更新保留恢复备份与可执行权限,同步安装和回滚
    的目录变更;Windows 使用跨进程独占锁,并避免覆盖已有备份。
  • 依赖来源统一。 Go 模块、Relay 来源与集成锁统一固定到 Foundation v0.1.2。

安装与兼容

npm install -g cc-connect-next@beta
cc-connect-next --version

已有安装可显式执行 cc-connect-next update beta/upgrade beta
GitHub Latest 和 npm latest 继续保持 v0.2.1;省略 update_channel 仍默认 Stable。
本次发布不更改当前 daemon,也不会自动部署 Relay。Windows 变更已通过交叉编译和
测试覆盖,未完成原生 Windows 运行验证。

English

The fifth v0.3.0 Beta fixes feedback privacy, error-feedback actions, and updater
backup handling, and adopts the published Foundation v0.1.2 patch.

Highlights

  • More complete feedback redaction. Quoted configuration keys, escaped
    values, prefixed credentials, cookies, URL user information, and host
    identifiers are redacted before truncation and submission. Ordinary URL
    query parameters and fragments remain intact.
  • Error offers belong to the initiating user. Automatic feedback actions in
    shared group sessions reject other users and work correctly with multiple
    workspaces or a fixed working directory. Context with unknown or future
    timestamps is excluded.
  • Stronger Relay input and authentication handling. Invalid UTF-8 is
    rejected, and GitHub App authentication and API requests do not follow HTTP
    redirects. Self-hosted Relay operators must update and deploy the matching
    source to receive these protections.
  • Safer update recovery. Unix Beta updates retain recovery backups and
    executable permissions and sync installation/rollback directory changes.
    Windows uses an exclusive cross-process lock and avoids overwriting backups.
  • One pinned dependency source. The Go module, Relay source, and integration
    lock all use Foundation v0.1.2.

Install and compatibility

npm install -g cc-connect-next@beta
cc-connect-next --version

Existing installations can explicitly run cc-connect-next update beta or
/upgrade beta. GitHub Latest and npm latest remain at v0.2.1. Omitting
update_channel still selects Stable. Publishing does not change a running
daemon or deploy a Relay. Windows changes have compilation and test coverage;
native Windows execution remains unverified.