Skip to content

GrantTrace v2.5.1

Choose a tag to compare

View all tags
@ysc070528 ysc070528 released this 05 Oct 05:32
· 15 commits to main since this release
v2.5.1
16a605d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

GrantTrace v2.5.1

v2.5.1 is a maintenance release focused on validation correctness, recovery safety, and release hardening.

Fixed

  • Reject unsafe Merge Patch probes before writes when the original state cannot be restored exactly.
  • Preserve array record associations during BOLA comparison to avoid overstating confirmed authorization bypasses.
  • Harden report target and metadata redaction for known credentials.
  • Prevent report outputs from overwriting specification, configuration, or loaded local $ref inputs.
  • Improve local and conditional schema resolution and configuration-to-spec operation validation.
  • Preserve legacy v2.5.0 scalar parameter configurations while applying strict schema-aware validation.
  • Preserve Swagger 2.0 uniqueItems constraints so duplicate configured arrays are rejected before any request is sent.

Verification

  • 560 tests passed
  • Python 3.9 / 3.12 / 3.14 CI passed
  • Mypy passed
  • Ruff passed
  • Runtime dependency audit passed
  • CodeQL passed
  • Branch-aware coverage: ~85.27%

Safety

GrantTrace remains read-only by default. Active PATCH testing still requires explicit opt-in and rollback verification.

Windows portable

Windows 10 / 11 64-bit users can download GrantTrace-v2.5.1-Windows-x64.zip.

No Python installation is required. Extract the ZIP completely, then double-click Start-Demo.bat to run the built-in demo and open the HTML report.

Verify the download with SHA256SUMS.txt.

Full Changelog: v2.5.0...v2.5.1

Assets 4
Loading