Skip to content

v3.1.6 - Security hardening

Choose a tag to compare

View all tags
@bhdicaire bhdicaire released this 04 Jun 21:25
v3.1.6
210e1e7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security hardening

This release contains runtime and operational hardening for vanityURLs instances.

Bug Fixes

  • add redirector security headers (0a6d2aa)
  • harden dev command spawning (932e762)
  • harden target blocklist validation (1dc34d4)
  • refresh access JWKS cache (0c63775)
  • remove inline default page code (ed8513c)

Documentation

  • add release workflow (194ecde)
  • consolidate release workflow (92e7917)

Tests

  • expand worker security coverage (4f0c047)

Continuous Integration

  • document repository rules (aecec0e)
  • require signed release tag flow (ea46ff2)
  • upgrade release-please action (166acae)
Assets 2
Loading