Commit 3db6190825
Verified · cmc ci/build: success ci/test: success
Layout: unified · split
CHANGELOG.org +15
| @@ -4,6 +4,21 @@ Versioning follows semver from v0.1.0. Database migrations run | |||
| 4 | automatically on daemon start; upgrade notes appear per release when | 4 | automatically on daemon start; upgrade notes appear per release when |
| 5 | anything beyond "replace the binary and restart" is needed. | 5 | anything beyond "replace the binary and restart" is needed. |
| 6 | 6 | ||
| 7 | * v1.43.2 — 2026-10-13 | ||
| 8 | |||
| 9 | - Go 1.27.2 and =golang.org/x/net= v0.60.0. govulncheck reported twelve | ||
| 10 | reachable findings in =net/http=, =net/textproto=, =crypto/tls= and | ||
| 11 | =html/template= (GO-2026-6599 through GO-2026-6617); all are fixed in | ||
| 12 | these versions, and the release binaries are built with the fixed | ||
| 13 | toolchain. | ||
| 14 | - Raw files and =wiki/_raw= send =ETag= and =Cache-Control=: a matching | ||
| 15 | =If-None-Match= gets a 304 before the blob is read, a branch or tag is | ||
| 16 | no-cache, a full commit sha is immutable for a year, and a private | ||
| 17 | repository's responses are private (#329). | ||
| 18 | - A release asset's size, checksum and actions each keep one line. | ||
| 19 | - The weekly runner prune keeps the locally built CI image; it cannot be | ||
| 20 | pulled back, and every job naming it failed without it. | ||
| 21 | |||
| 7 | * v1.43.1 — 2026-10-03 | 22 | * v1.43.1 — 2026-10-03 |
| 8 | 23 | ||
| 9 | - =/explore= lists public repositories by latest activity, builds not | 24 | - =/explore= lists public repositories by latest activity, builds not |