Skip to content

Release 26.08_1

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Aug 08:08
· 119 commits to main since this release
26.08_1
521c1a9

Zentinel 26.08_1

Cargo version: 0.6.24

What's Changed

Dependency-only release. No proxy behavior, configuration schema, or agent
protocol changes.

Security

  • Bump rustls 0.23.42 → 0.23.43, part of the rust-minor group. Upstream
    hardens session-ticket age arithmetic and the PSK binder suffix calculation
    (checked_sub in Rfc5077Ticketer::decrypt), and tightens QUIC cipher-suite
    and TLS-version checks. No CVE assigned and no Zentinel-specific exposure
    identified; taken as defense in depth for the TLS listener path. (#326)

Changed

  • Bump the rust-minor group (4 updates): rustls 0.23.42 → 0.23.43,
    http 1.4.2 → 1.5.0, redis 1.4.1 → 1.5.0, and
    toml 1.1.3+spec-1.1.0 → 1.1.4+spec-1.1.0. (#326)
  • Bump pem 3.0.6 → 4.0.0. (#327)
  • Bump jsonschema 0.48.1 → 0.49.5. (#328)
  • Bump base64 0.22.1 → 0.23.1. (#329)
  • Bump validator 0.20.0 → 0.21.0. (#330)
  • Bump async-memcached 0.6.0 → 0.7.0. (#332)

Documentation

  • Correct the documented release process to match the Release workflow's
    actual tag+1 versioning behavior. (#325)

Installation

From crates.io

cargo install zentinel-proxy

From binary

Download the appropriate archive for your platform and extract:

tar -xzf zentinel-26.08_1-linux-amd64.tar.gz
sudo mv zentinel /usr/local/bin/

Docker

docker pull ghcr.io/zentinelproxy/zentinel:26.08_1

Supply Chain Security

All release archives are signed with Sigstore cosign using keyless signing tied to GitHub Actions OIDC identity. SLSA v1.0 provenance is attached to this release.

Verify a binary

cosign verify-blob --bundle zentinel-26.08_1-linux-amd64.tar.gz.bundle \
  --certificate-identity-regexp "github.com/zentinelproxy/zentinel" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  zentinel-26.08_1-linux-amd64.tar.gz

Verify the container image

cosign verify ghcr.io/zentinelproxy/zentinel:26.08_1 \
  --certificate-identity-regexp "github.com/zentinelproxy/zentinel" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Checksums

Verify downloads with the .sha256 files.

Software Bill of Materials

CycloneDX 1.5 and SPDX 2.3 SBOMs are attached as release assets.

Assets 18
Loading