Skip to content

Commit dc07a1e

Browse files
chore: publish new package versions (#4766)
This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated. # Releases ## @core/sync-service@1.7.12 ### Patch Changes - 6e917b9: Add `ELECTRIC_DATABASE_TCP_KEEPALIVE_IDLE`, `ELECTRIC_DATABASE_TCP_KEEPALIVE_INTERVAL`, `ELECTRIC_DATABASE_TCP_KEEPALIVE_COUNT` and `ELECTRIC_DATABASE_TCP_USER_TIMEOUT` for configuring TCP keepalive and user timeout on database connections. All of them are opt-in; when unset the OS defaults are kept. - c9e8a68: Fix an authentication bypass on `/v1/shape` in secure mode. Authentication now gates on the route resolved by the router rather than on the raw request path, so requests whose target normalizes to `/v1/shape` (e.g. a trailing slash, a doubled slash, or a percent-encoded character) can no longer skip the secret check. CORS headers for shape routes are matched the same way. Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
1 parent c9e8a68 commit dc07a1e

4 files changed

Lines changed: 8 additions & 11 deletions

File tree

‎.changeset/db-tcp-keepalive.md‎

Lines changed: 0 additions & 5 deletions
This file was deleted.

‎.changeset/shape-auth-path-normalization-bypass.md‎

Lines changed: 0 additions & 5 deletions
This file was deleted.

‎packages/sync-service/CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
# @core/sync-service
22

3+
## 1.7.12
4+
5+
### Patch Changes
6+
7+
- 6e917b9: Add `ELECTRIC_DATABASE_TCP_KEEPALIVE_IDLE`, `ELECTRIC_DATABASE_TCP_KEEPALIVE_INTERVAL`, `ELECTRIC_DATABASE_TCP_KEEPALIVE_COUNT` and `ELECTRIC_DATABASE_TCP_USER_TIMEOUT` for configuring TCP keepalive and user timeout on database connections. All of them are opt-in; when unset the OS defaults are kept.
8+
- c9e8a68: Fix an authentication bypass on `/v1/shape` in secure mode. Authentication now gates on the route resolved by the router rather than on the raw request path, so requests whose target normalizes to `/v1/shape` (e.g. a trailing slash, a doubled slash, or a percent-encoded character) can no longer skip the secret check. CORS headers for shape routes are matched the same way.
9+
310
## 1.7.11
411

512
### Patch Changes

‎packages/sync-service/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"name": "@core/sync-service",
33
"private": true,
4-
"version": "1.7.11",
4+
"version": "1.7.12",
55
"scripts": {
66
"publish:hex": "../../scripts/publish_hex.sh electric",
77
"changeset": "pushd ../..; pnpm changeset; popd"

0 commit comments

Comments
 (0)