This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+4 more
Summary
AI summarytranslate now hard‑exits on any URLSession HTTP/HTTPS/WS/WSS attempt via URLProtocol registration.
Full changelog
NetworkGuard runtime enforcement.
translate now registers a URLProtocol at startup that hard-exits the process (exit 2) on any URLSession HTTP/HTTPS/WS/WSS attempt. The "100% on-device" promise is now belt-and-suspenders: README claim plus runtime kill-switch.
The HTTP server (--serve) is unaffected — Hummingbird opens kernel sockets, which URLProtocol does not see. The guard only intercepts URLSession traffic, which is exactly the surface a future bug could leak through.
140 tests, 0 failures (was 136).
Breaking Changes
- translate registers a URLProtocol at startup that hard‑exits (exit code 2) on any URLSession HTTP/HTTPS/WS/WSS request, enforcing strict on‑device execution.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Translate
All releases →Beta — feedback welcome: [email protected]