osc_dev/osc-api
1
0
Fork 0
Code Issues 1 Pull requests 4 Projects Releases 144 Packages 1 Wiki Activity Actions
144 releases 144 tags
  • v4.12.0-beta.7 a7349ec143

    v4.12.0-beta.7 Stable

    oscbot released this 2026-06-10 23:09:19 +02:00 | 74 commits to beta since this release

    4.12.0-beta.7 (2026-06-10)

    Bug Fixes

    • bind oauth state to the session secret (659689f)
    • bound skin upload/download decompression and archive size (d7b9894)
    • cap each download-all object fetch at the upload ceiling (771528f)
    • exempt signed media requests from rate limiting (e338735)
    • gate /api/og behind OG_SHARED_SECRET to block roster scraping (798fec1)
    • redact secrets in Settings Debug output (0f41f2e)
    • reject replayed ci-status requests (2cf5b9f)
    • require SESSION_SECRET >= 32 bytes in release builds (aaab401)
    • saturating sum in download-all size pre-check to prevent i64 overflow (47b5a42)
    • scope default trusted-proxy CIDRs to the proxy network (740af14)
    • stream .osk overrides rewrite to a tempfile to bound memory (bbc4279)
    Downloads