Repository navigation
Release 0.7.0 - #264
Merged
Merged
Release 0.7.0#264
Conversation
Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
Describe the two macOS steps to allow a blocked download Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
Count the medium fix target from the report, like the disclosure period Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
whoami asked the API who the credential is and, when that failed for any reason, printed a warning and exited 0. A script checking whether a profile is signed in could not tell a revoked or rejected sign-in from an API that cannot be reached. When GET /v1/me answers that the credential is not accepted (401, or a refused refresh), whoami now still prints the local details and the warning, leaves the API fields null, and exits 3 with the same sign-in hint as every other command. An API that is unreachable or fails on its side (network, 5xx, timeout) still gives exit 0. The README and the changelog describe both cases. Closes #258 Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
The page the loopback listener returns at the end of `hodeishield login` was a bare paragraph. It is now a self-contained page with the product mark, for success, denied access, a failed or mismatched response and unknown paths. It follows the system light or dark preference, loads nothing from the network and runs no script, and a Content-Security-Policy header allows only its stylesheet by hash. The text is in English, Spanish, German or French, following Accept-Language, and nothing from the request is written into it. Closes #257 Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
Set the version to 0.7.0 in Cargo.toml, Cargo.lock, the README and the release docs (release-signing and verifying-releases), and move the unreleased entries into a new 0.7.0 changelog section dated 2026-11-01. The section has a Changed heading (styled sign-in result page, SECURITY.md medium fix target counted from the report) and a Fixed heading (whoami exit code, macOS download steps). The whoami change is marked as a behaviour change for scripts, which is why this is a minor version. Unreleased is now empty and the compare links are updated. Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
Signed-off-by: d0ubl3g <48954024+d0ubl3g@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Promote dev to main for 0.7.0.
Changes since 0.6.1:
hodeishield loginis a styled page with the product mark (Show a styled sign-in result page in the browser #261).whoamiexits 3 instead of 0 when the API does not accept the credential (Exit 3 from whoami when the API rejects the stored sign-in #262). This is a behaviour change for scripts, which is why the version is 0.7.0.The version is set in Cargo.toml, Cargo.lock, the README and the release docs, and the changelog section is dated 2026-11-01. Tagging v0.7.0 after the merge starts the release workflow.