Skip to content

chore(main): release 0.2.3 - #87

Open
CodeMaster4711 wants to merge 1 commit into
mainfrom
release-please--branches--main
Open

chore(main): release 0.2.3#87
CodeMaster4711 wants to merge 1 commit into
mainfrom
release-please--branches--main

Conversation

@CodeMaster4711

@CodeMaster4711 CodeMaster4711 commented Mar 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

🤖 I have created a release beep boop

0.2.3 (2026-09-07)

Features

  • add animated custom icons for all sidebar navigation items (8a331f4)
  • add auto-generated self-signed TLS to api-gateway (cdebae4)
  • add binary self-update for csf-agent and csf-updater via github releases (847dfe5)
  • add bucket access key issuance and rotation (f1a65b2)
  • add bucket tab to resource group dashboard (7be4450)
  • add centralized log viewer with per-service tracing capture and admin retention settings (509f7a8)
  • add cidr suggestion, rg search, pinned rg cards and settings/delete actions (55b603c)
  • add container settings edit and fix compose port and status bugs (6da4250)
  • add container status detail, log streaming, and exec shell for workloads (3de5fab)
  • add container stop, restart, and performance insights UI with backend lifecycle support (1a03c1c)
  • add customizable icon, color and pinning for resource groups (fb130e6)
  • add data model for object storage buckets and garage nodes (c20964c)
  • add debug tracing across rootfs build and workload boot pipeline (ddade34)
  • add dedicated vm detail page with stats and console (e9c64d3)
  • add docker compose stack deployment with service discovery and smart workload icons (4fef60f)
  • add firecracker microvm runtime alongside docker via runtime trait (91cf259)
  • add garage cluster reconciliation with dynamic replication factor (c6a7ca2)
  • add garage dev container for local object storage testing (6b7d93a)
  • add gravatar avatar support via profile email (ad086f1)
  • add live status polling and loader badges for workloads (0134ef1)
  • add log stream diagnostics for guest vsock log path (2f0c37a)
  • add node reboot, power off, and drain actions (c606fea)
  • add object-storage service with bucket crud (cd84454)
  • add OCI registry pull-through cache to avoid docker.io rate limits (0f9a5ca)
  • add patroni user, config template and entrypoint script (ec78a2e)
  • add qemu vm runtime with vnc console bridge (88efb4f)
  • add redeploy and stack management for containers and compose stacks (ff3b1e7)
  • add resource picker with docker compose stacks and dynamic service icons (caf3acb)
  • add RG port mapping with dedicated container/RG/node port UI (e8f6ad5)
  • add rg_port dnat for resource-group-scoped port mapping (0e489f5)
  • add rg-internal s3 dns and dnat wiring in agent (630dedc)
  • add s3 object browser with presigned upload and download (2af50c2)
  • add sigv4-preserving s3 streaming proxy for external buckets (11095dd)
  • add workload self-healing with real capacity scheduling and working failover (fbb344e)
  • addded ground setup for scheduler (2cca6f1)
  • added admin page and update page for cluster (ca13d40)
  • added agend volume mount (8549880)
  • added all frontend auth pages (3ace818)
  • added container placement in agent and scheduler (f84c304)
  • added endpoints in api gateway (c9a3563)
  • added frontend for one mono repo (924865b)
  • added gh token for image pulling without rate limiting (b62b2d1)
  • added graph with histroy (4e73dc5)
  • added heartbeat logic to agent (a54df53)
  • added heartbeat logic to agent (04d3716)
  • added logo in header for svelte (48190b7)
  • added migrations for workloads (964c20a)
  • added mtls encryption (9692379)
  • added new alpha github run (40b7af5)
  • added new alpha github run (1ec1a76)
  • added OpenTelemetry Tracing (2d11250)
  • added own patroni image (f4b1938)
  • added pki for agent (73fd3ad)
  • added Prometheus Metrics and Rate Limiting (fbf9a48)
  • added rbac for all things (76faa2a)
  • added rbac for all things (3b1be5b)
  • added renovate (5d0b547)
  • added renovate via github actions (18de04d)
  • added ressource groups (e818f2f)
  • added ressource modell and workload specs (50aac08)
  • added sdn controller for network (59ace74)
  • added sdn controller for network (49b5ed9)
  • added update mech (0a33b2b)
  • added update stop and resume (fd01b36)
  • added user name in sidebar and added nodes page demo for testing (60f7e41)
  • added volume manager mount (f0e3313)
  • agent: log update signal when desired flake rev changes (0cfbcb6)
  • allocate and configure guest ip for firecracker rg mesh (f891fea)
  • allow reusing existing iso images when deploying a vm (4cf9c20)
  • animated login button and fail modal (fcf45a2)
  • api-gateway: restrict system update endpoint to admin-only via RBAC (988342b)
  • attach rbd volumes to firecracker workloads via mmds (6cbbb49)
  • bring up per-resource-group wireguard mesh with persistent agent identity (72cb91f)
  • build and publish csfx-guest-init binary in release and prerelease pipelines (84fcdea)
  • build and publish csfx-guest-init binary in release pipeline (56aabd9)
  • build csf-updater locally via nix and publish alpha binaries to github releases (eb3df31)
  • build csf-updater locally via nix and publish alpha binaries to… (3d759e1)
  • build firecracker rootfs images via oci-client instead of docker (ac92280)
  • cluster-wide bootstrap tokens (b479ec6)
  • collect real cpu memory and network stats for firecracker vms (51b8c9d)
  • consolidate add bucket into add resource picker and add buckets overview page (ac451d7)
  • cp: wire csfx-updater as systemd service and rename units (5bd062e)
  • csf-updater: implement secure rust-based updater daemon with nixos integration (eb065a0)
  • csf-updater: verify image digests against GHCR before applying update (f791f42)
  • csfx-updater: add observability logs across update pipeline (fcd2495)
  • docker compose prod (d5ebd58)
  • drop jailer root privileges via uid gid allocator (0a54b98)
  • enforce resource group network isolation with per-rg bridges and nftables (7dd3533)
  • entry point for schedueler in etcd cluster (080225c)
  • etcd: enable authentication and restrict access to csf service user (ba2a887)
  • expose agent and updater binary versions in update-status (08030a9)
  • force cgroup v2 hierarchy in guest kernel boot args (0f9ff80)
  • generate oci runtime spec config.json instead of shell entrypoint (688620b)
  • ground setup failover controler (806149f)
  • ground setup failover controler (47ea8b6)
  • impl communcitaion and hearbeat (d51fb91)
  • implement gitops poller, git mirror, and nix build pipeline in csf-updater (d08736e)
  • implement watchdog heartbeat counter in registry and csf-updater (3024db4)
  • inject bucket credentials into workload env on bucket binding (834144f)
  • inject CSF_BUILD_VERSION into binaries at compile time via build.rs (8d18efb)
  • log workload output immediately and silence expected /dev EBUSY warning (4c6f71b)
  • login flow (9f18045)
  • new connection to db and refactor (063bc84)
  • new nix config (26ea9cc)
  • pre reg agent for zero trust (85bd67a)
  • propagate agent version on every heartbeat and add live node metrics tunnel (72c46e3)
  • propagate desired_flake_rev via heartbeat response to agent update trigger (97914a6)
  • propagate post_update_heartbeats counter to agent for watchdog health check (88c0051)
  • push workload assignments to agents instead of relying on poll interval (993e29b)
  • reconcile firecracker vms from disk state on agent restart (4fe23df)
  • remove docker runtime and fix firecracker feature gaps exposed by removal (b79f429)
  • renam csf to csfx (6888431)
  • replace flake-rev API with version-based update scheduling (64dfe62)
  • replay boot-time log backlog to new log stream clients (0263911)
  • replay boot-time log backlog to new log stream clients (9b0f011)
  • resource-groups: add container deploy, volume management, and detail view (7b32db8)
  • run container workloads through libcontainer instead of hand-rolled init (b4f71d5)
  • serve frontend statically from api-gateway on port 8000 (69f0ad8)
  • setup ground struc agent (eeb12eb)
  • ssh: add ephemeral key-based SSH access to cluster nodes (e4940e7)
  • ui,agent,registry: add WireGuard P2S VPN, modal forms, and NodePort expose model (d8c098b)
  • unify user and admin settings into single dialog (0e050a8)
  • use mutable binary paths for csf-agent and csf-updater to enable self-update (64e4326)
  • use vcpu and gb units for vm resource form with advanced toggle (1115e1d)
  • wire firecracker rg networking, dns and wireguard without docker (ac082cc)
  • wire object-storage into api-gateway with rbac and tenant-scoped bucket listing (c62c7d6)
  • wire real pty exec and rootfs entrypoint into guest-init (0c2d502)
  • wire vm networking, iso upload and vnc console frontend (14bd46a)

Bug Fixes

  • accept self-signed gateway cert when downloading vm iso images (7acdc3f)
  • add dedicated vm filter tab instead of counting vms as containers (903543b)
  • add explicit host route to mmds address before fetching guest config (b1a5f68)
  • add object-storage crate to control-plane docker build (19cbb00)
  • add object-storage crate to docker build and compose (2add4b1)
  • add patroni bootstrap script to create csf app user and database (0e07850)
  • added docker compose and fix build in docker (e24e7b9)
  • added log for testing update flow (8aaeef0)
  • added log for testing updater (2728d06)
  • added logging for testing (920e730)
  • agent (b09048e)
  • agent bootstrap error (013b2c8)
  • agent error (a6b0bbe)
  • agent: detect OS from /etc/os-release instead of sysinfo (1d86d69)
  • agent: rename state dir from csfx-daemon to csfx-agent (0ee1896)
  • agent: start docker on demand via systemd instead of at boot (86a2d7c)
  • allow mmds requests on guest network interface (3d0e59e)
  • always accept new log vsock client instead of gating on stale connection (1942fc2)
  • api gateway and regisrty (68a9671)
  • api-gateway: exempt update status routes from rate limiting (fd08546)
  • api-gateway: make TLS config generation async to avoid block_on panic (ba21420)
  • append resource group search domain to vpn client dns config (cd417f7)
  • assign mmds bootstrap address before guest network fetch (44373d6)
  • assign storage capacity from disk on first garage registration (915c10a)
  • attach firecracker tap devices to rg bridge and clean up stale rg networks (8591a8e)
  • auth probelm (80ef776)
  • auto-assign workloads to agents and wire up management wireguard tunnel (e1fa45a)
  • backfill missing management tunnel ip for agents on heartbeat (d644977)
  • bound mmds fetch with timeout and read exact content-length (ce65500)
  • build error with updater hash (839fd28)
  • build errors and added frontend (b1cb885)
  • bump nixpkgs to 25.05 for Cargo 1.85/edition2024 support (ddb75f3)
  • cargo fmt (93ce25f)
  • cert issue (f544e36)
  • clean up rootfs extract directory before and after failed layer extraction (95f9c57)
  • clean up stale jailer chroot directory before each start attempt (4c756a0)
  • coerce port fields to string before trim in resource group deploy form (49d667a)
  • compile errors (6cfe5ae)
  • correct cgroup path to jailer systemd scope (bd44a16)
  • correct cgroup path to jailer systemd scope, not a nonexistent parent-cgroup dir (4bc7db5)
  • correct pre-release version comparison and let forced updates bypass pause (46266c7)
  • correct rootfs extraction, capabilities and log draining for container workload startup (84f8eed)
  • correct sigv4 encoding and garage node status tracking (d41bda1)
  • create csfx role and database during patroni bootstrap (7d0486c)
  • create metrics fifo before configuring firecracker metrics endpoint (b412801)
  • create standard guest root directories missing after bundle layout change (cb700f2)
  • csf-updater: run as dedicated system user with docker group instead of root (22cf1e5)
  • csf-updater: validate version string from etcd before executing update (13e9fdf)
  • csfx-updater: add --no-out-link to nixos-rebuild build to avoid permission error (0b8e472)
  • dep update axum 0.7 -> 0.8 (9be3ff4)
  • deps reqwest 0.11 -> 0.13 (864c2db)
  • deps: update dependency @icons-pack/svelte-simple-icons to v7 (01dd084)
  • deps: update dependency @icons-pack/svelte-simple-icons to v7 (e5cef90)
  • deps: update rust dependencies (2fe8332)
  • deps: update rust dependencies (b2e32f0)
  • dev bootstrap (1547ee8)
  • disable firecracker seccomp filter incompatible with musl syscalls (9b63df4)
  • disable oci-client default features to remove aws-lc-sys from musl builds (e5b09c6)
  • disable rustls default aws-lc-rs feature to fix musl aarch64 link (8c61471)
  • docker access in updater error (ce45cba)
  • docker compose (8fd8be6)
  • docker long build (2372614)
  • docker prod build (581a20d)
  • docker updater error (d8f7457)
  • eliminate aws-lc-sys from musl build by switching to ring crypto provider across all services (4045fbb)
  • enable firecracker seccomp filter in jailer spawn (005395f)
  • enable firecracker seccomp filter in jailer spawn (30b3a08)
  • etcd connection error (1a44dc1)
  • etcd: block etcd ports from external access via firewall rules in install script (34e1cd2)
  • exec into running container namespace instead of vm root (386a401)
  • exempt agent heartbeat/workloads/volumes routes from rate limiting (1b4d3c3)
  • filter noisy access, sql, heartbeat and performance events from log storage (a6f7510)
  • fix rg dns write sandbox failure and reconcile orphaned containers on agent restart (b6f2a5d)
  • flush log stream headers immediately and keep container stdio pipes alive (0d864f8)
  • for local dev env (5decf9b)
  • format (73ab945)
  • gateway: exempt registry routes from rate limiting (c9f30e9)
  • github pipeline (791c518)
  • gitignore (d6c3dca)
  • grant standard container capabilities to workload processes (c262358)
  • handle 429 rate limit in agent registration with retry backoff (31d3c29)
  • image version (cd9b47c)
  • include guest-init binary version in rootfs cache key (128f562)
  • include response body in firecracker api error messages (3967e93)
  • install rustls aws-lc-rs crypto provider before TLS init (5ccb37d)
  • load times on svg main (e37e88b)
  • load xterm dynamically to avoid SSR CJS named export error (db41761)
  • lock state when updater go into error (28c0247)
  • log full error chain for mmds route and fetch failures (84f4b54)
  • log vsock accept guard blocks reconnects after first client (1fd8ef6)
  • make bootstrap registration idempotent by upserting on hostname (98a935a)
  • make firecracker binary path configurable via env var (da9fa98)
  • manifest build (dd5d522)
  • master node auto-bootstrap — self-register agent via admin API on first boot (1d64a1f)
  • match firecracker cmdline after jailer execve for pid lookup (3940ee4)
  • match garage 2.x admin api schema for update cluster layout (0c8cc67)
  • match workload cgroup path to jailer short id for accurate metrics (eba2df6)
  • metrics error agent (4ac4ce8)
  • migrate axum routes to 0.8 syntax and downgrade sysinfo to 0.32 (d29d12d)
  • migration in docker dev enviroment and auth fix frontend (8140686)
  • mount devpts in guest-init to resolve pty ENOENT on exec (0d18f12)
  • mtls handshake (cbe31b3)
  • mtls heart beat (93fb782)
  • mtls heart beat (869170f)
  • mtls issue (26e0cb2)
  • new test version (109c775)
  • nix compile error (8d6d32e)
  • nix compile error (48d2bde)
  • nix config error (6b5adf7)
  • nix config with path (1d80789)
  • nix container version (4e6da4e)
  • nix error (ebfdf55)
  • nix os config version (8ed2d60)
  • nixos test version updated (0230d7f)
  • nixos updater error (2b46867)
  • nixos version (64cfcec)
  • node deduplication and cluster telemetry (2259013)
  • nodes offline check (353f803)
  • only report qemu vm as failed on genuine qmp error states (d630691)
  • parse firecracker api response by content-length instead of eof (9c4d0b4)
  • pass rg_dns_registry as arc to heartbeat loop (f0e6738)
  • path error in updater (e10e08f)
  • patroni bootstrap error (5895235)
  • patroni internal error from bootstrap (d52bc00)
  • pin rust 1.88.0 via rust-overlay for edition2024/time crate support (2b6bc89)
  • pipeline build error (ddbfc81)
  • point resource group Corefile at actual zone file directory (8f9c4a6)
  • preserve original path encoding in s3 proxy and simplify presign url (b31e0be)
  • proxy api requests to https gateway with insecure flag for dev (d65b24c)
  • rate limit by authenticated user instead of shared ip bucket (4f166c3)
  • rate-limit agents by API key hash instead of shared IP bucket (d4ab5ff)
  • reap correct container pid in guest-init to stop premature log task teardown (3c2f109)
  • recover stuck vsock log listener when host client disconnects silently (e10bbda)
  • recreate resource group dns container when stale instead of skipping (b9949e5)
  • recreate stale dns containers, drop loopback proxy shortcut, fix stats history query, and handle 401 in frontend (282e8cb)
  • register single-node garage deployments without a csfx agent (077a2a0)
  • registry: make AgentStatus::from_str case-insensitive (e80d89b)
  • registry: migrate route params from :param to {param} syntax (af9e2ec)
  • reload hypervisor version reactively once auth token hydrates (a8739e2)
  • remove daemonize flag so systemd correctly tracks the qemu process (f88e4a6)
  • remove dead ready-signal wait blocking guest-init boot (491570b)
  • remove log client liveness probe causing immediate disconnect in guest-init (bf7c8d1)
  • remove NoNewPrivileges to allow sudo systemctl for binary restart (ddc22b8)
  • remove ssh console button from node detail sheet (5bc2905)
  • remove unsupported allow_mmds_requests field from network-interface config (6d12a37)
  • renovate (1b87f10)
  • repair jailer chroot cleanup and resource group dns for firecracker workloads (182aa70)
  • repair workload exec and log streaming across vsock, tls and lock paths (2a0b9ab)
  • replace aws-lc-rs with ring for musl aarch64 (7fdc686)
  • replace rustls-tls feature with rustls for reqwest 0.13 compat (bf6d095)
  • repo (fa07190)
  • report stopped status for stacks with all-stopped containers (13c066d)
  • request mmds root path instead of latest/meta-data in guest-init (eef9357)
  • resolve mirrored image references without docker mirror query protocol (5376080)
  • resolve musl build failure for csf-updater binary (50a89e8)
  • restrict binary dir permissions and verify sha256 checksum on download (2b3260f)
  • retry metrics forwarding to gateway and log permanent failures as errors (62f9224)
  • reverse proxy on registry routet through api gateway (6e2ce4f)
  • rollback on failed update flow (a1109d2)
  • route agent proxy calls via loopback when target is the local WireGuard tunnel IP (be9d879)
  • route presigned s3 uploads through dedicated gateway port (e8c70fa)
  • route qemu vm status inspection to qemu runtime instead of firecracker (a9206f6)
  • run jailer as agent uid/gid so socket permissions match (83fe2e7)
  • run qemu as agent user, fix vnc display, add reconcile after restart (61bbabd)
  • scope object storage data proxy under /s3data prefix (42dcd08)
  • securtiy issues on agent registration (228a81f)
  • seed vsock cid counter from host state and clean up jailer on boot failure (82cea21)
  • separate resource group cidr from mgmt tunnel range and prevent vsock cid reuse# (ad9ff6e)
  • set tap device owner and named systemd unit for privileged chroot cleanup (43949f9)
  • set TLS_ENABLED=false in docker-compose and accept self-signed certs in agent (a14e75d)
  • set working directory to /tmp for nixos-rebuild to avoid symlink permission error (74b7bd1)
  • shorten jailer chroot path to fit unix socket SUN_LEN limit (fb1b2da)
  • shorten tap device name to fit linux 15 character ifname limit (4c6b998)
  • show vm workloads correctly instead of container in resource group ui (1c4384d)
  • sign gateway tls cert from internal ca and persist container state across reboot (1a6180b)
  • single-node patroni+etcd, remove haproxy (45952da)
  • small change for testing updater (1f5509f)
  • spawn jailer as root via systemd-run and fix chroot base dir nesting (90329e4)
  • ssh error for dev (a6a4fc9)
  • stage kernel, rootfs, and volume devices inside firecracker jailer chroot (270ff86)
  • stop forwarding raw agent status codes as gateway response codes (f286562)
  • stream s3 proxy request body instead of buffering in memory (406badb)
  • stream s3 proxy request body instead of buffering in memory (d8c1b43)
  • strip digest newlines to prevent invalid image reference in manifest (fdd4d7e)
  • strip trailing semicolon from parsed nix version strings (346e5f4)
  • swagger ui (54113f4)
  • swagger ui (033f790)
  • switch rustls provider from aws-lc-rs to ring for musl compat (7c6c62b)
  • sync missing permissions to existing Admin role on startup (bf050ae)
  • sync workload status on stop/restart and auto-detect gateway TLS SAN (7be20b8)
  • token route for dev (97d0776)
  • unblock agent log streaming and auto-allocate node ports (56a09fc)
  • unblock heartbeat loop from metrics fifo read and guest log reconnects (ed4cb37)
  • unblock manual updates, auto-allocate agent tunnel IP, fix ceph rbd config (a4ef5f8)
  • unset no_new_privileges to silence unenforced seccomp warning in guest init (3b1ce4b)
  • update bollard, rand, sysinfo, axum FromRequestParts for dep updates (588d22b)
  • updater error with images and pull (bbb8694)
  • updater flow (3d9b26c)
  • updater flow with api-gateway (1de5b80)
  • updater flow with api-gateway (5bf29ab)
  • updater: correct GitHub refs API path and treat 304 as no-op (e11c40e)
  • updater: set explicit nixosConfigurations attr in flake URL to match csfx-node (bdaa676)
  • updater: surface version resolution failures to etcd (9ad7152)
  • use docker icon for compose stack row instead of generic layers icon (7ca06ad)
  • use firecracker uds handshake instead of af_vsock for guest exec and log streams (7a1d0a0)
  • use garage binary for healthcheck instead of missing wget (84b394e)
  • use jail-relative metrics path so firecracker can create it in chroot (e651b36)
  • use native byte order when packing ipv4 sockaddr for ioctl calls (6d926cc)
  • use portable c_char type for interface name buffer on arm64 musl (ea88be5)
  • use relative API URLs for same-origin deployment (16495a4)
  • use valid 32-byte hex rpc secret for dev garage container (0110aa3)
  • verify agent stream tls against internal ca and pull missing coredns image (69d4910)
  • version docker image (8768620)
  • wait for auth token before loading data on nodes, resource-groups and logs pages (9ff3735)
  • wait for auth token before loading resource group on mount (b67e6f1)
  • wait for ca file and order gateway after registry to avoid self-signed race (b1f256f)
  • wire TLS through dev environment for gateway, agents, and registry (8028bae)
  • workflow (c71c60f)
  • workload log streaming and cgroup metrics path (251803f)

Reverts

  • restore --no-seccomp jailer flag, firecracker default filter kills vm on connect syscall (e56ee71)

This PR was generated with Release Please. See documentation.

@CodeMaster4711
CodeMaster4711 force-pushed the release-please--branches--main branch from 1eb9ce6 to f5d7705 Compare March 7, 2026 21:46
@CodeMaster4711
CodeMaster4711 force-pushed the release-please--branches--main branch 18 times, most recently from 800235c to e4d452c Compare March 11, 2026 20:06
@CodeMaster4711
CodeMaster4711 force-pushed the release-please--branches--main branch from e4d452c to 7c453e3 Compare March 17, 2026 19:33
@CodeMaster4711
CodeMaster4711 force-pushed the release-please--branches--main branch from 7c453e3 to 3c5aef6 Compare April 22, 2026 12:01
@CodeMaster4711
CodeMaster4711 force-pushed the release-please--branches--main branch from 3c5aef6 to 80a8e5b Compare May 16, 2026 19:25
@CodeMaster4711
CodeMaster4711 force-pushed the release-please--branches--main branch 5 times, most recently from 18b80a5 to 1bc718b Compare June 17, 2026 18:13
@CodeMaster4711
CodeMaster4711 force-pushed the release-please--branches--main branch from 1bc718b to d6ca385 Compare June 17, 2026 18:22
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

16 similar comments
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 9, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 9, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

10 similar comments
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

cargo audit found vulnerabilities:

  • RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
  • RUSTSEC-2026-0258 h2@0.4.15: h2 unbounded empty DATA frames
  • RUSTSEC-2026-0235 rkyv@0.7.46: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
  • RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

autorelease: pending

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@CodeMaster4711