-
v1.2.0
StableAll checks were successfultag / tag (push) Successful in 1m45scheck / web (push) Successful in 1m37srelease / binaries (push) Successful in 1m43scheck / go (push) Successful in 1m57srelease / docs (push) Successful in 1m7srelease / image (push) Successful in 2m55srelease / module (push) Successful in 17srelease / manifests (push) Successful in 18srelease / android (push) Successful in 3m55srelease / release (push) Successful in 11sreleased this
2026-08-13 12:43:56 +00:00 | 354 commits to main since this releaseFeatures
- feat(system): seal backup archives with an install HMAC (
21dde44) - feat(audit): record security events in the audit log (
3d94160)
Fixes
- fix(build): make the image build hermetic and drop dead catalogs (
16f79be) - fix(server): cap request bodies and import decompression (
00ce6ff) - fix(user): harden the first-boot setup window (
8e12cfc) - fix(user): equalise login timing for unknown emails (
e66b37a) - fix(user): lock out repeated failed password logins (
66fb969) - fix(webhook): guard deliveries against loopback and link-local SSRF (
4f429d6) - fix(svc): mask internal error text on the wire (
901a9fc) - fix(server): add security response headers (
2f8f843) - fix(svc): scrub streaming responses in the sanitize interceptor (
cfc070c) - fix(svc): clamp client list limits to a server ceiling (
3f1925a) - fix(system): only pass http(s) release URLs to clients (
c8ead55)
Other
- ci(release): pin the renamed compose image path (
a1e906f) - chore(deploy): point pull references at the new forge (
0b675fe) - ci: pin actions by digest and verify tool downloads (
a805eb4) - docs(deploy): mark the unsigned ZOT OCIRepository dev-only (
202acb2) - ci(tag): only tag when the push is still the head of main (
e0bc0e2)
Full changelog: https://git.eagraiclainne.ie/eagraiclainne/app/compare/v1.1.0...v1.2.0
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- feat(system): seal backup archives with an install HMAC (