Skip to main content

One post tagged with "security"

View All Tags

flux 0.45.0 — verify before you parse

· 6 min read

0.45.0 is a minor release, which pre-1.0 is how this project signals a breaking change. One of them: a webhook that listens beyond your own machine must now state what it does about verification. If that is you, read the action-needed section before upgrading — it is one line.

This post covers 0.43.0 through 0.45.0. The theme running through all three is not a feature. It is that several things which looked verified turned out not to be, and the interesting part is consistently how they were found rather than what the patch was.