]> git.ardis.lu - envpass/tag
v0.1.3
object ad96f58ba70653e060269190c16d967f243c5220
authorArdis Lu <ardisglu@gmail.com>
Wed, 24 Jun 2026 07:08:52 +0000 (00:08 -0700)
Release v0.1.3

Security hardening:
- Set HTTP server configurations to mitigate request exhaustion.
- More aggressively zero-out the `prf` buffer whenever possible.

Supply-chain security improvements:
- The package now uses staged publishing to the npm registry.
- `node_modules` caching has been disabled in the GitHub Actions runner, as
suggested by the `actions/setup-node` maintainers.

Other improvements:
- Added `types` key to `package.json` to get "TS" badge on the npm registry.
- Narrowed and improved internal type definitions.
- Upgraded dependencies, notably `commander` to v15 (requires Node.js v22.12+).
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg4OaSdijsW6raSPK3llrsZIEdtk
SQaGaXESF8DcruCNgAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQF9cuPISHuZv2tWvTpgnYBoAPDOgeFfzUIYq5EYvXZSV86E7KOptXqjhmzGVWjwGZ/
kPNXdDzh0CobkxI8e+BQc=
-----END SSH SIGNATURE-----
This page took 0.031558 seconds and 3 git commands to generate.