• zhongli-2026.6.4 6e9c93650a

    marvin8 released this 2026-06-04 02:15:47 +00:00 | 195 commits to main since this release

    Signed by marvin8
    SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

    [zhongli-2026.6.4] - 2026-06-04

    Documentation

    • 📝 zhongli: document federation side-channel in README (L1)
    • 📝 zhongli: mark L1 and L3 resolved in Security-Audit files
    • 📝 zhongli: fix Security-Audit status markers and executive summary

    Security

    • 🔒 zhongli: try resolve=False before federating in find_status_by_url (L1)
    • 🔒 zhongli: redact attachment URL paths from debug log (L3)
    • 🔒 zhongli: remove _url_origin; remove or reword debug logs per review (L3)

    Testing

    • zhongli: test two-phase resolve search behaviour (L1)
    • zhongli: test _url_origin strips path from attachment URL (L3)
    Downloads