Skip to content

v0.20.2
Compare
Choose a tag to compare
@ericmj ericmj released this 03 Feb 22:03
v0.20.2
cd5040b
This commit was signed with the committer’s verified signature.
ericmj Eric Meadows-Jönsson
GPG key ID: A463B9FA6BBE3383
Learn about vigilant mode.

Enhancements

  • Add --output option to mix hex.package fetch task
  • Add cacerts_path configuration for custom CA certificate files
  • Improve output in mix hex.publish to make it more clear to what repository you are publishing
  • Explain red colors in hex.outdated

Bug fixes

  • Fix HTTP timeout config
  • Do not allow creating empty packages

Security fixes

  • Fix for directory traversal vulnerability for symlinks in tarballs
  • Update package checksum to include the entire tarball instead of specific files inside it
Assets 2
Loading