Skip to content

- bumps version for release of 1.34.0#7921

Merged
gavinbarron merged 1 commit into
mainfrom
release/v1.34.0
Jul 8, 2026
Merged

- bumps version for release of 1.34.0#7921
gavinbarron merged 1 commit into
mainfrom
release/v1.34.0

Conversation

@gavinbarron

Copy link
Copy Markdown
Contributor

Bumps version for release of 1.34.0.

Changes

  • Cut the [Unreleased] CHANGELOG section into ## [1.34.0] - 2026-07-08.

The csproj VersionPrefix was already set to 1.34.0 by the prerelease PR (#7903), so per the established release convention this PR only updates CHANGELOG.md.

Release notes (1.34.0)

  • Fixed a path traversal vulnerability where workspace consumer identifiers (clientName/pluginName) and workspace configuration keys were used as filesystem path components without containment validation, allowing a crafted name (e.g. junk/../Victim) to overwrite another consumer''s cached OpenAPI description. #7919

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@gavinbarron gavinbarron requested a review from a team as a code owner July 8, 2026 19:57
@msgraph-bot msgraph-bot Bot added this to Kiota Jul 8, 2026
@github-project-automation github-project-automation Bot moved this to In Progress 🚧 in Kiota Jul 8, 2026
@gavinbarron gavinbarron merged commit 9d4f80e into main Jul 8, 2026
307 of 308 checks passed
@gavinbarron gavinbarron deleted the release/v1.34.0 branch July 8, 2026 20:00
@github-project-automation github-project-automation Bot moved this from In Progress 🚧 to Done ✔️ in Kiota Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done ✔️

Development

Successfully merging this pull request may close these issues.

2 participants