Skip to content

v0.3.0

Choose a tag to compare

@alankyshum alankyshum released this 15 Mar 18:49
· 31 commits to main since this release

What's Changed

Security Hardening

  • Secure PID file management with atomic writes and ownership validation
  • Path traversal protection in diff parser and config/cache paths
  • Bounded LLM response reading with validated deserialization and UTF-8 safe truncation
  • Prompts piped via stdin to prevent process table exposure
  • Log file moved to secure directory with restricted permissions

Testing

  • Integration tests for diff rendering, SIGUSR1 signal handling, stress tests, and LLM integration

Full Changelog: v0.2.3...v0.3.0