heiko/cert-proxy
heiko/cert-proxy
1
0
Fork 0
Code Issues 14 Pull requests Releases 3 Activity Actions
3 releases 71 tags
  • v1.20.0 904c69f828

    release v1.20.0
    All checks were successful
    nagonag (Push) / nagonag (push) Successful in 3m6s
    Details
    Stable

    heiko released this 2026-06-16 22:42:01 +02:00 | 0 commits to master since this release

    Signed by heiko
    GPG key ID: 697F0EDD68099F6F

    Release notes

    Release v1.20.0

    • go: update dependencies
    • rm workflow artifact
    • [nagonag] update dependencies (master) (#44)
    • client: guard umask hardening behind build tags ai:claude-sonnet-4-5
    • remove the workflow artifacts
    • deps(master): update minor/patch dependencies
    • chore: vul*
    • deps(master): update minor/patch dependencies
    • Merge #42: harden temp file creation against symlink injection
    • fix: wsl_v5 whitespace violations (add blank lines before statements)
    • cert: address security review findings — active umask hardening, deployment docs, cleanup test, Rename behavior
    • cert: add hardening — NFS warning, orphaned file cleanup, umask startup check, enhanced symlink test
    • cert: harden temp file creation
    • fix: version
    • feat: align version output for client and server
    • systemd: rely on systemd for executable location
    • Add agent-specific instruction files
    • Merge branch 'packaging'
    • fix lintian warnings
    • packaging: include default and CA files
    • add config files
    • conf: add ius example config
    • fix: Lstat in Mkdir rejects symlink-to-dir (#40)
    • packaging: fix lintian override filenames and per-package coverage
    • Merge #37: reject client CN containing path separator ai:claude-opus-4-7
    • fix: sanitize 401 body, strengthen fuzz invariants
    • test: fuzz target and HTTP-boundary checks for client CN
    • fix: map invalid client CN to 401 instead of 500
    • artwork: scale frontmatter SVG to viewport width (ai:opus-4.7)
    • artwork: new frontmatter banner and project icon (ai:opus-4.7)
    • feat: reject Windows reserved names in client CN
    • refactor: reuse list.ValidateDomain for CN check
    • fix: reject client CN containing path separator
    • test: add regression for CN path separator (#31)
    • fix: atomic symlink replacement in cert client (#34)
    • packaging: first run with gogogo
    • gogogo: new config
    • cicd: rename workflow files
    • build: gogogo.conf
    • deps(master): update minor/patch dependencies
    • cicd: new shared workflow
    • cicd: workflow
    • feat: Add marketing frontmatter SVG to README
    • go: update dependencies
    • ci: disable release until it is fixed
    • ci: fixup release workflow

    Packages: cert-proxy-client 1.20.0-1 cert-proxy-server 1.20.0-1

    Downloads