This release adds 2 notable features for engineering teams evaluating rollout.
Published 1mo
Secrets & Credentials
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
go
hashicorp-vault
secrets-management
security
Affected surfaces
deps
Summary
AI summaryComprehensive frontend security and modernization updates are introduced.
Full changelog
What's Changed
- Create dependabot.yml by @jjacque in https://github.com/algolia/sup3rS3cretMes5age/pull/136
- chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/137
- feat(web): comprehensive frontend security and modernization by @jjacque in https://github.com/algolia/sup3rS3cretMes5age/pull/141
- chore(deps): bump github.com/hashicorp/vault from 1.21.0 to 1.21.1 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/138
- feat(security): comprehensive security hardening and validation by @jjacque in https://github.com/algolia/sup3rS3cretMes5age/pull/143
- docs: enhance godoc comments, README documentation and add comprehensive AWS deployment guide by @jjacque in https://github.com/algolia/sup3rS3cretMes5age/pull/140
- chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/146
- chore(deps): bump github.com/hashicorp/vault from 1.21.1 to 1.21.2 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/145
- chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/148
- chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/149
- chore(deps): bump github.com/cloudflare/circl from 1.6.2-0.20250618153321-aa837fd1539d to 1.6.3 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/150
- chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/153
- chore(deps): bump google.golang.org/grpc from 1.75.1 to 1.79.3 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/154
- chore(deps): bump github.com/hashicorp/vault/api from 1.22.0 to 1.23.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/155
- chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/157
- chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/156
- chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/158
- chore(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/159
- chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/162
- docs: add contribution standards and GitHub templates by @jjacque in https://github.com/algolia/sup3rS3cretMes5age/pull/163
- chore(deps): bump github.com/labstack/echo/v4 from 4.13.4 to 4.15.2 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/160
- chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/164
- chore(deps): bump github.com/labstack/echo/v4 from 4.15.2 to 4.15.4 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/166
- chore(deps): bump go.mongodb.org/mongo-driver from 1.17.4 to 1.17.7 by @dependabot[bot] in https://github.com/algolia/sup3rS3cretMes5age/pull/165
Full Changelog: https://github.com/algolia/sup3rS3cretMes5age/compare/v0.4.3...v0.4.4
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About sup3rS3cretMes5age
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
Related context
Beta — feedback welcome: [email protected]