v4.2.19

[Power2All]

v4.2.19

• Bumped versions.
• Fixed a exploit issue with fast-uri on the RtcTorrent library

Summary by CodeRabbit

• New Features

  • Released version 4.2.19 with updated browser build and container image support.
  • Improved browser compatibility by providing required runtime globals while reducing unnecessary polyfills.

• Bug Fixes

  • Addressed a fast-uri security exploit in the RtcTorrent library.
  • Added validation for Sentry event and trace sampling rates, preventing invalid configuration values.

• Tests

  • Added coverage for valid boundary values and invalid Sentry sampling configurations.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 80bbe5c3-f6ad-4e94-809e-dc4a7abff679

📥 Commits

Reviewing files that changed from the base of the PR and between 99fd0b8 and 50dc45e.

📒 Files selected for processing (1)

• README.md

🚧 Files skipped from review as they are similar to previous changes (1)

• README.md

---

📝 Walkthrough

Walkthrough

The release updates project metadata and Docker references to v4.2.19. Sentry sampling validation and initialization were updated. Browser package and webpack configuration were changed for the new browser bundle setup.

Changes

Release metadata

Layer / File(s)	Summary
Version and packaging alignment Cargo.toml, README.md, docker/Dockerfile, docker/build.bat	Project versions, Sentry dependencies, changelog text, source checkout, and Docker image tags were updated for v4.2.19.

Sentry configuration

Layer / File(s)	Summary
Sentry validation and initialization src/config/impls/configuration.rs, src/main.rs, tests/config_tests.rs	Sentry sampling rates are validated within 0.0..=1.0. Initialization uses the ClientOptions builder API. Tests cover boundary and invalid values.

Browser bundle configuration

Layer / File(s)	Summary
Browser bundle setup lib/rtctorrent/package.json, lib/rtctorrent/webpack.config.js	The browser entry points to the unminified bundle. Browser tooling dependencies and Node module fallbacks were updated, with Buffer provided globally.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

• Power2All/torrust-actix#78: Updates the same release metadata and Docker version locations.
• Power2All/torrust-actix#87: Updates the project version and Docker release references.
• Power2All/torrust-actix#90: Updates the same release files while changing unrelated functional code.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title "v4.2.19" is a version number that refers to the version bump documented throughout the changeset, but does not describe the primary change or purpose of the PR.	Use a descriptive title that explains the main change, such as 'Bump to v4.2.19: update Sentry dependencies and fix fast-uri exploit' or 'Release v4.2.19 with dependency updates and security fixes'.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch v4.2.19

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docker/Dockerfile`:
- Line 6: Update the torrust-actix checkout in the Dockerfile to use a published
tag that exists in Power2All/torrust-actix, or replace the checkout with the
released source corresponding to the intended version. Keep the build pointed at
the released torrust-actix code so the Docker build succeeds.

In `@README.md`:
- Line 603: Correct the changelog entry by replacing “a exploit issue” with “an
exploit issue,” leaving the rest of the fast-uri/RtcTorrent entry unchanged.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: af24c9b2-bf5d-4218-b0c5-114f1f58013d

📥 Commits

Reviewing files that changed from the base of the PR and between 0543903 and 99fd0b8.

⛔ Files ignored due to path filters (10)

• Cargo.lock is excluded by !**/*.lock
• lib/rtctorrent/dist/rtctorrent.browser.js is excluded by !**/dist/**
• lib/rtctorrent/dist/rtctorrent.browser.js.LICENSE.txt is excluded by !**/dist/**
• lib/rtctorrent/dist/rtctorrent.browser.js.map is excluded by !**/dist/**, !**/*.map
• lib/rtctorrent/dist/rtctorrent.min.js is excluded by !**/dist/**, !**/*.min.js
• lib/rtctorrent/dist/rtctorrent.min.js.LICENSE.txt is excluded by !**/dist/**
• lib/rtctorrent/dist/rtctorrent.min.js.map is excluded by !**/dist/**, !**/*.map, !**/*.min.js.map
• lib/rtctorrent/dist/rtctorrent.node.js is excluded by !**/dist/**
• lib/rtctorrent/dist/rtctorrent.node.js.map is excluded by !**/dist/**, !**/*.map
• lib/rtctorrent/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (9)

• Cargo.toml
• README.md
• docker/Dockerfile
• docker/build.bat
• lib/rtctorrent/package.json
• lib/rtctorrent/webpack.config.js
• src/config/impls/configuration.rs
• src/main.rs
• tests/config_tests.rs