ai/danielmiessler.fabric
1
0
Fork 0
mirror of https://github.com/danielmiessler/fabric.git synced 2026-09-10 07:36:44 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

chore(release): Update version to v1.4.431

Browse source
This commit is contained in:
github-actions[bot] 2026-03-06 17:18:26 +00:00
parent 0d5b411e38
commit d50bea5888
5 changed files with 12 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
CHANGELOG.md
View file

@ -1,5 +1,15 @@
# Changelog
## v1.4.431 (2026-03-06)
### PR [#2049](https://github.com/danielmiessler/Fabric/pull/2049) by [ksylvan](https://github.com/ksylvan): Security Hardening: API Key Redaction, Path Traversal Prevention, and Shell Injection Elimination
- Fix: Redact API keys in config responses and eliminate shell injection surfaces.
- Added `maskAPIKey` to redact all but the last 4 characters of API keys, mitigating sensitive data exposure (CWE-200).
- Masked all provider API keys in the `GET /config` response payload to prevent accidental credential leakage.
- Replaced `exec`/shell commands in the Obsidian route with native `fs` APIs, fully eliminating shell injection vectors (CWE-78).
- Added path-confinement validation ensuring resolved file paths remain within their intended target directories, blocking path traversal attacks (CWE-22).
## v1.4.430 (2026-03-06)
### PR [#2044](https://github.com/danielmiessler/Fabric/pull/2044) by [PrakharMNNIT](https://github.com/PrakharMNNIT) and [ksylvan](https://github.com/ksylvan): feat: Add Bedrock bearer token (ABSK) authentication and guided setup

2
cmd/fabric/version.go
View file

@ -1,3 +1,3 @@
package main
var version = "v1.4.430"
var version = "v1.4.431"

BIN
cmd/generate_changelog/changelog.db
View file

Binary file not shown.

7
cmd/generate_changelog/incoming/2049.txt
View file

@ -1,7 +0,0 @@
### PR [#2049](https://github.com/danielmiessler/Fabric/pull/2049) by [ksylvan](https://github.com/ksylvan): Security Hardening: API Key Redaction, Path Traversal Prevention, and Shell Injection Elimination
- Fix: Redact API keys in config responses and eliminate shell injection surfaces.
- Added `maskAPIKey` to redact all but the last 4 characters of API keys, mitigating sensitive data exposure (CWE-200).
- Masked all provider API keys in the `GET /config` response payload to prevent accidental credential leakage.
- Replaced `exec`/shell commands in the Obsidian route with native `fs` APIs, fully eliminating shell injection vectors (CWE-78).
- Added path-confinement validation ensuring resolved file paths remain within their intended target directories, blocking path traversal attacks (CWE-22).

2
nix/pkgs/fabric/version.nix
View file

@ -1 +1 @@
"1.4.430"
"1.4.431"