Skip to content

v0.9.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Aug 11:11
· 22 commits to main since this release
v0.9.2
848ef7c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This release fixes a high severity security issue in how the plugin writes SSH configuration. We recommend everyone update.

Fixed

  • prevent deployment-controlled identifiers from injecting SSH config directives (GHSA-q8pv-vrm7-546m)
  • keep workspace polling alive when SSH config updates fail
  • expand ~ and $HOME in the SSH log directory and network info directory settings, consistent with how the data and binary directories are already resolved
Assets 3
Loading