Skip to content

Latest commit

 

History

History
99 lines (65 loc) · 2.76 KB

CHANGELOG.md

File metadata and controls

99 lines (65 loc) · 2.76 KB
Raw

CHANGELOG

0.6.8 (2020-02-04)

  • Fix tarball file extraction through symlinks

0.6.7 (2020-02-03)

  • Fix compatibility with OTP 18 and 17

0.6.6 (2020-02-03)

  • Do not crash on empty tarballs
  • Fix directory traversal vulnerability for symlinks in tarballs

0.6.5 (2020-01-14)

  • Transition away from http_uri when using newer OTP releases
  • Ensure Role is given as an atom in hex_api_organization_member:add/3
  • Add http_headers to the hex_core:config() type
  • Add default http_headers to hex_core:default_config/0
  • Fix hex_registry:decode_and_verify_signed/2 spec
  • Fix hex_tarball:files/0 type

0.6.4 (2019-12-27)

  • Fix setting level and trasfer options in organization api

0.6.3 (2019-12-16)

  • Add organization API
  • Add level and transfer params to add owner API
  • Add hex_tarball:unpack_docs/2
  • Add hex_api_auth:test_key/3

0.6.2 (2019-11-11)

  • Gracefully handle HTTP errors

0.6.1 (2019-07-30)

  • Fix bug when publishing with configuration that does not have repo_organization key set

0.6.0 (2019-07-27)

  • Backwards-incompatible: Change successful return value of hex_tarball:create/2 from {ok, {Tarball, Checksum}} to {ok, Map}. Currently, Map has tarball, inner_tarball, and outer_tarball keys
  • Rename existing tarball checksum to inner checksum and deprecate it
  • Add tarball outer checksum
  • Do not allow comments in safe_erl_term
  • Forward compatible tarball contents by not failing on unknown files

0.5.1 (2019-07-30)

  • Fix bug when publishing with configuration that does not have repo_organization key set

0.5.0 (2019-02-26)

  • Fetch package data from proper repository organization and don't verify origin if configured
  • Backwards-incompatible: Make hex_api module private
  • Backwards-incompatible: organization config key has been replaced with api_organization and api_repository keys
  • Add repo_organization config key
  • vendor.sh: Add missing hex_pb_*.erl files
  • vendor.sh: Fix replacing hex_core

0.4.0 (2018-12-30)

  • Revert swich from proto2 to proto3
  • Verify authenticity of signed payload
  • Add repo_verify_origin config option

0.3.0 (2018-12-14)

  • Swich from proto2 to proto3
  • Fix hex_http:body type
  • Fix hex_http:request spec

0.2.1 (2018-12-13)

  • Always return the whole response tuple from requests
  • Guess rebar3 as build tool over rebar
  • Return compressed tarball from hex_tarball:create_docs/1
  • Add package identity to registry records

0.2.0 (2018-09-01)

  • Accept {filename(), filename()} in files list for tarballs
  • Support httpc profile through adapter configs
  • Update generated protobuf files with OTP 21 compatibility

0.1.1 (2018-08-11)

  • Use hex_core project name in user agent string

0.1.0 (2018-08-08)

  • First release