Skip to content

chore: v0.3.28 (ships #272) - #273

Merged
ralyodio merged 1 commit into
masterfrom
chore/v0.3.28
Nov 10, 2026
Merged

ralyodio merged 1 commit into
masterfrom
chore/v0.3.28

Conversation

@ralyodio

Copy link
Copy Markdown
Collaborator

Releases #272: NAT'd hosting nodes now dial the publisher they replicate from, at its announced addresses. This is the fix for seed2 replicating at about 0 MB/s to NAT'd hosts. Also included: #270 and #271 (/album on c0mpute.com/chat). Same file set as the v0.3.27 bump (#269).

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

13 finding(s)

HIGH/CRITICAL: 1 | MEDIUM: 8 | LOW: 4

Severity Rule Location
HIGH js-ssrf-outbound-request apps/web/public/sw.js:24
MEDIUM js-unescaped-html-sink apps/web/src/app/blog/[slug]/page.tsx:53
MEDIUM js-unescaped-html-sink apps/web/src/app/layout.tsx:89
MEDIUM sh-remote-script-execution scripts/dev-setup.sh:25
MEDIUM sh-eval-expansion scripts/dev-setup.sh:35
MEDIUM sh-remote-script-execution scripts/install.sh:181
MEDIUM sh-remote-script-execution scripts/install.sh:206
MEDIUM sh-remote-script-execution scripts/install.sh:404
MEDIUM sh-remote-script-execution scripts/install.sh:446
LOW py-ssrf-outbound-request examples/business-strategist-agent/chat.py:37
LOW py-ssrf-outbound-request examples/business-strategist-agent/train.py:54
LOW secret-generic-credential node/crates/c0mpute-core/src/webhook.rs:1171
LOW py-path-traversal node/crates/c0mpute-core/tests/fixtures/fake-infernet-text:29

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 5b44eff into master Nov 10, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant