v0.1.10

Core

• Fix path traversal and concurrency race conditions issues (#212)
• Restrict links and implement zip bomb detection (#211)

Commands

• Update commands semantics (#217)

Bug Fixes

• Fix zip slip issues in archive API (#210)

Dependencies

• Bump golang.org/x/text from 0.36.0 to 0.37.0 (#213)
• Bump golang.org/x/sys from 0.43.0 to 0.44.0 (#214)
• Bump github/codeql-action from a723e99345b89ee0bbcbd68ee4e63f9a56b42a25 to 868e2ea5641bfa2e2af1f144664178b4c5575fab (#215)
• Bump release-drafter/release-drafter from 7.2.1 to 7.3.0 (#216)
• Bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 (#205)
• Bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (#206)
• Bump github/codeql-action from 0b7b740d4cd9b44f80c907b666497564df09d1d9 to a723e99345b89ee0bbcbd68ee4e63f9a56b42a25 (#207)
• Bump useblacksmith/setup-docker-builder from 1.7.0 to 1.8.0 (#208)
• Bump release-drafter/release-drafter from 7.2.0 to 7.2.1 (#209)
• Bump github/codeql-action from ee09113642cdd89dfd282ecd8d96340380bbee26 to 0b7b740d4cd9b44f80c907b666497564df09d1d9 (#201)
• Bump useblacksmith/setup-docker-builder from 1.6.0 to 1.7.0 (#202)
• Bump docker/bake-action from 7.0.0 to 7.1.0 (#203)
• Bump golang.org/x/text from 0.35.0 to 0.36.0 (#197)
• Bump golang.org/x/sys from 0.42.0 to 0.43.0 (#196)
• Bump github.com/moby/patternmatcher from 0.6.0 to 0.6.1 (#190)
• Bump docker/login-action from 4.0.0 to 4.1.0 (#195)
• Bump useblacksmith/setup-docker-builder from 1.4.0 to 1.6.0 (#192)
• Bump the actions group across 1 directory with 3 updates (#198)
• Bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#200)
• Bump github/codeql-action from a899987af240c0578ed84ce13c02319a693e168f to ee09113642cdd89dfd282ecd8d96340380bbee26 (#199)
• Bump github/codeql-action from 05b1a5d28f8763fd11e77388fe57846f1ba8e766 to a899987af240c0578ed84ce13c02319a693e168f (#191)
• Bump github/codeql-action from 7dd76e6bf79d24133aa649887a6ee01d8b063816 to 05b1a5d28f8763fd11e77388fe57846f1ba8e766 (#189)
• Bump github.com/klauspost/compress from 1.18.4 to 1.18.5 (#187)
• Bump release-drafter/release-drafter from 7.0.0 to 7.1.1 (#188)
• Bump golang.org/x/sys from 0.41.0 to 0.42.0 (#179)
• Bump golang.org/x/sync from 0.19.0 to 0.20.0 (#180)
• Bump golang.org/x/text from 0.34.0 to 0.35.0 (#181)
• Bump actions/download-artifact from 8.0.0 to 8.0.1 in the actions group (#182)
• Bump release-drafter/release-drafter from 6.2.0 to 7.0.0 (#183)
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#184)
• Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#185)
• Bump github/codeql-action from d1a65275e8dac7b2cc72bb121bf58f0ee7b0f92d to 7dd76e6bf79d24133aa649887a6ee01d8b063816 (#186)
• Bump docker/login-action from 3.7.0 to 4.0.0 (#175)
• Bump docker/metadata-action from 5.10.0 to 6.0.0 (#176)
• Bump docker/bake-action from 6.10.0 to 7.0.0 (#177)
• Bump github/codeql-action from 710e2945787622b429f8982cacb154faa182de18 to d1a65275e8dac7b2cc72bb121bf58f0ee7b0f92d (#178)
• Bump the actions group with 3 updates (#173)
• Bump github/codeql-action from ef618feace3c4838ae42b239ab86e8fb46437508 to 710e2945787622b429f8982cacb154faa182de18 (#172)
• Bump golang.org/x/sys from 0.40.0 to 0.41.0 (#169)
• Bump github.com/klauspost/compress from 1.18.3 to 1.18.4 (#168)
• Bump github/codeql-action from b13d724d35ff0a814e21683638ed68ed34cf53d1 to ef618feace3c4838ae42b239ab86e8fb46437508 (#171)
• Bump golang.org/x/text from 0.33.0 to 0.34.0 (#170)
• Bump useblacksmith/setup-docker-builder from 1.3.0 to 1.4.0 (#167)
• Bump github/codeql-action from f985be5b50bd175586d44aac9ac52926adf12893 to b13d724d35ff0a814e21683638ed68ed34cf53d1 (#166)
• Bump github/codeql-action from 55252c7a3a47fea1e0fdd923b269f4be8a5ad9a0 to f985be5b50bd175586d44aac9ac52926adf12893 (#164)
• Bump docker/login-action from 3.6.0 to 3.7.0 (#165)

Contributors

@thelovekesh

Installation

To install wpm v0.1.10

Linux and Mac

curl -fsSL https://wpm.so/install | bash

Windows

powershell -c "irm wpm.so/install.ps1|iex"

Docker

docker pull trywpm/cli