Skip to content

v1.7.11

Choose a tag to compare

View all tags
@jiashuoz jiashuoz released this 23 Aug 21:34
· 66 commits to main since this release
v1.7.11
5a3dc78
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch release. No API or wire-contract changes — inbound email authentication for internationalized domains, self-hosting fixes, and a Python SDK path-parameter guard.

Highlights

  • IDNA-encode domains before DMARC DNS lookups (#931). DMARC policy resolution now works for internationalized (non-ASCII) sender domains instead of failing the lookup.
  • Self-hosting actually works (#917): compose build, fail-closed boot, content-scan docs, env override, and .env precedence.
  • Dot-segment path-parameter guard in the Python SDK (#929). This was live, not latent — httpx normalized ./.. away, so some values reached a real, misdirected route rather than 404ing.

Clients released alongside

Package Version Change
e2a (PyPI) 5.8.0 The dot-segment guard. Behavior change: path-parameter values that previously produced a misdirected request now raise E2AValidationError (unsafe_path_segment) before the request is built. Minor rather than patch for exactly that reason.
@e2a/cli (npm) 2.5.0 --cc / --bcc on e2a send and e2a reply (#924), each repeatable. send pre-checks the combined 50-recipient cap and exits USAGE.
@e2a/sdk (npm) 5.7.0 (unchanged) No functional change this cycle.

Note for TypeScript SDK users: the TS half of the dot-segment fix is still open (#915). @e2a/sdk's URL builder performs the same path collapse, and that fix is not in this release.

What's Changed

  • fix(contract): strict-decode scenarios.yaml so a typo'd key is a decode error by @AmirF194 in #910
  • fix: make self-hosting actually work (compose build, boot fatal, content-scan docs, env override, .env precedence) by @jiashuoz in #917
  • feat(cli): add --cc and --bcc to e2a send and e2a reply by @AmirF194 in #924
  • fix(web): move the DNS-provider MCP notice to the domains prompt card by @jiashuoz in #930
  • deps: bump the go-minor-patch group with 9 updates by @dependabot[bot] in #928
  • fix(emailauth): IDNA-encode domains before DMARC DNS lookups by @AmirF194 in #931
  • fix(sdk): guard the generated-layer chokepoint against dot-segment path params by @AmirF194 in #929
  • deps: bump the npm-minor-patch group with 5 updates by @dependabot[bot] in #926
  • deps(web): bump the npm-minor-patch group in /web with 6 updates by @dependabot[bot] in #927
  • release(sdk): publish 5.8.0 python client and CLI 2.5.0 by @jiashuoz in #932

Full Changelog: v1.7.10...v1.7.11

Contributors

AmirF194, dependabot, and jiashuoz
Assets 2
Loading