RDODCP-914: Chisel Sync with Upstream and dependency Updates - #60
Open
anurag-outsystems wants to merge 8 commits into
Open
RDODCP-914: Chisel Sync with Upstream and dependency Updates#60anurag-outsystems wants to merge 8 commits into
anurag-outsystems wants to merge 8 commits into
Conversation
Reliability, security, and observability across client/server/tunnel: keepalive ping timeouts, TCP half-close propagation, dial-before-accept, graceful SIGTERM shutdown, UDP flow-cap sweep, pre-auth WS size cap, SOCKS ACL enforcement + live authfile reload, exact legacy-fingerprint match, --auth validation, session/failed-login logs, jpillora#608 panic fix, goreleaser multi-arch Docker images, and a two-stage release pipeline (draft + versioned images at tag time; latest promoted on publish). Full detail: 1.12-changes.md, the PR (34 commits), and https://jpillora.com/chisel-112-ux-review Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- remove the local opts module replacement\n- upgrade opts to v1.8.1 for margin-aware help wrapping\n\nCo-Authored-By: Codex GPT-5 <noreply@openai.com>
- build releases with Go 1.27.0 - update x/crypto to v0.55.0 for GO-2026-6303 Co-Authored-By: Codex GPT-5.2 <noreply@openai.com>
anurag-outsystems
requested review from
samartha-pm
and removed request for
a team
September 3, 2026 05:40
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio. Pull Request Developer GuidanceQuestions? See the Wiz FAQ. Please contact the Security Office if you encounter issues with Wiz pull request scanning. |
- record only listener peers observed from inbound UDP - expire and cap peer state, rejecting untrusted destinations - cover reverse UDP flow and destination validation Co-Authored-By: Codex GPT-5 <noreply@openai.com>
OutSystems uses Azure DevOps for releases with security scanning. The upstream promote.yml workflow references jpillora registries and conflicts with our release pipeline. Applied merge=ours strategy (same as ci.yml) to preserve our empty file during future upstream syncs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Syncs OutSystems Chisel fork with upstream v1.12.1, bringing reliability improvements, security fixes, and dependency updates.
Security & Reliability:
Features:
Dependencies:
Validation: