chore: release 3.2.0 - #22
Merged
Merged
Conversation
Drops the -SNAPSHOT suffix and retitles the release. The old title —
"scanEmbedded: mid-sentence URL scanning" — described the version as it
stood before the JVM <-> JS parity audit added two security fixes to it,
and a release note that undersells its own security content is a release
note people skip.
3.2.0 now carries, in order of what a reader should notice:
- redirect hops get the same checks as the first request, via a single
core definition (RedirectGuard) instead of three adapters each
improvising a different subset;
- the LLM tool-input scanner stopped dropping non-http(s) schemes and
protocol-relative URLs before the policy saw them;
- scanEmbedded, ported from the JS sibling.
Release surfaces walked:
profile README N/A — Maven Central badges, no hardcoded version
README.md/.ko.md already 3.2.0
CHANGELOG (x3) 3.2.0 entry complete, retitled here
docs/ mkdocs installation already 3.2.0; remaining 3.1.1 hits are
historical changelog entries, correct to keep
Discussions N/A — disabled on this repo
devslab-examples all 8 demos already pin 3.2.0
Verified: ./gradlew build BUILD SUCCESSFUL, 239 tests, failures=0.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
-SNAPSHOT제거 + 릴리스 제목 갱신.제목을 바꾼 이유
기존 제목이
scanEmbedded: mid-sentence URL scanning이었는데, 그건 정합성 감사가 보안 수정 2건을 더 넣기 전 기준입니다. 자기 보안 내용을 축소해 말하는 릴리스 노트는 사람들이 건너뜁니다.3.2.0이 담는 것(독자가 알아야 할 순서대로):
RedirectGuard)로scanEmbedded(JS 자매에서 포팅)릴리스 체크리스트 6표면
3.1.1은 과거 changelog 항목이라 유지가 맞음jdkhttp 데모 확인:
SsrfGuardedHttpClient가 이제Redirect.NEVERdelegate를 요구하는데, 데모는HttpClient.newBuilder().build()를 쓰고 그 기본값이NEVER라 깨지지 않습니다. 기존 jdkhttp 테스트가newHttpClient()로 통과한 것으로 실증됐습니다. 다만 데모의 "어떤 HttpClient든 감쌀 수 있다" 주석이 이제 사실이 아니라, devslab-examples에 별도로 고치겠습니다.검증
./gradlew buildBUILD SUCCESSFUL, 239 tests, failures=0.머지 후
v3.2.0태그 푸시 → Maven Central 배포 + GitHub Release 자동 생성.