Skip to content

fix(releases): latest.json says 0.2.29 - #45

Merged
ralyodio merged 2 commits into
masterfrom
fix/feed-0.2.29
Oct 14, 2026
Merged

ralyodio merged 2 commits into
masterfrom
fix/feed-0.2.29

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

The v0.2.29 bump (#44) missed FALLBACK_VERSION in apps/web/src/app/releases/latest.json/route.ts, so the feed still says 0.2.28 and no worker self-updates to the infernet leak fix (#43).

🤖 Generated with Claude Code

The v0.2.29 bump missed FALLBACK_VERSION, so latest.json kept saying
0.2.28 and no worker self-updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

8 finding(s)

MEDIUM: 8

Severity Rule Location
MEDIUM js-unescaped-html-sink apps/web/src/app/blog/[slug]/page.tsx:53
MEDIUM js-unescaped-html-sink apps/web/src/app/layout.tsx:95
MEDIUM sh-remote-script-execution scripts/dev-setup.sh:25
MEDIUM sh-eval-expansion scripts/dev-setup.sh:35
MEDIUM sh-remote-script-execution scripts/install.sh:159
MEDIUM sh-remote-script-execution scripts/install.sh:184
MEDIUM sh-remote-script-execution scripts/install.sh:277
MEDIUM sh-remote-script-execution scripts/install.sh:294

Snippets are redacted; ThreatCrush never prints matched credential material.

dash can exec a lone `sh -c` command, replacing the fake daemon's
cmdline before the scan (CI saw 'stale daemon still running' with no
signal sent). Keep sh alive with `; :` and wait until both fakes show
the infernet cmdline before reaping.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit 935f64f into master Oct 14, 2026
12 checks passed
@ralyodio
ralyodio deleted the fix/feed-0.2.29 branch October 14, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant