Skip to content

v1.1.4

Latest
Latest

Choose a tag to compare

View all tags
@CybotTM CybotTM released this 14 Jan 16:15
· 96 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.1.4
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: NOxv8dcZlMFz3wrLdHILVNSnF6xskqAjN3bnn0i7K30
Verified
Learn about vigilant mode.
57e5dab
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Security Fixes

  • fix(security): add ReferrerPolicy header for CSRF validation - Browsers were not sending Referer header required by Fiber's CSRF middleware, causing "referer not supplied" validation failures on HTTPS
  • fix(security): remove Cross-Origin-Embedder-Policy header - The default COEP header was breaking browser extensions like Bitwarden

Developer Experience

  • chore: migrate dev tools to go tool directive - Dev tools (templ, golangci-lint, goimports, gofumpt) now use Go 1.24+ tool directives for version-locked consistency

Full Changelog

v1.1.3...v1.1.4

Assets 3
Loading