• v1.2.0 a1e906f632

    v1.2.0
    All checks were successful
    tag / tag (push) Successful in 1m45s
    check / web (push) Successful in 1m37s
    release / binaries (push) Successful in 1m43s
    check / go (push) Successful in 1m57s
    release / docs (push) Successful in 1m7s
    release / image (push) Successful in 2m55s
    release / module (push) Successful in 17s
    release / manifests (push) Successful in 18s
    release / android (push) Successful in 3m55s
    release / release (push) Successful in 11s
    Stable

    nalum released this 2026-08-13 12:43:56 +00:00 | 354 commits to main since this release

    Features

    • feat(system): seal backup archives with an install HMAC (21dde44)
    • feat(audit): record security events in the audit log (3d94160)

    Fixes

    • fix(build): make the image build hermetic and drop dead catalogs (16f79be)
    • fix(server): cap request bodies and import decompression (00ce6ff)
    • fix(user): harden the first-boot setup window (8e12cfc)
    • fix(user): equalise login timing for unknown emails (e66b37a)
    • fix(user): lock out repeated failed password logins (66fb969)
    • fix(webhook): guard deliveries against loopback and link-local SSRF (4f429d6)
    • fix(svc): mask internal error text on the wire (901a9fc)
    • fix(server): add security response headers (2f8f843)
    • fix(svc): scrub streaming responses in the sanitize interceptor (cfc070c)
    • fix(svc): clamp client list limits to a server ceiling (3f1925a)
    • fix(system): only pass http(s) release URLs to clients (c8ead55)

    Other

    • ci(release): pin the renamed compose image path (a1e906f)
    • chore(deploy): point pull references at the new forge (0b675fe)
    • ci: pin actions by digest and verify tool downloads (a805eb4)
    • docs(deploy): mark the unsigned ZOT OCIRepository dev-only (202acb2)
    • ci(tag): only tag when the push is still the head of main (e0bc0e2)

    Full changelog: https://git.eagraiclainne.ie/eagraiclainne/app/compare/v1.1.0...v1.2.0

    Downloads