This release includes 1 security fix for security teams reviewing exposed deployments.
Published 6d
Communication & Email
✓ No known CVEs patched
This release patches 1 known CVE
Topics
email-testing
go
mailpit
pop3-server
smtp-relay
smtp-server
+1 more
smtp-testing
Affected surfaces
deps
Summary
AI summaryGHSA-28pq-6qxg-wg5r security hardening and configuration updates
Full changelog
Security
- Extend request body size cap to all JSON API endpoints (GHSA-28pq-6qxg-wg5r)
- Pin Github Actions workflow versions using full commit SHA
- Do not use npm cache to prevent cache poisoning
- Disable GitHub Actions credential persistence for checkout steps
Chore
Security Fixes
- dep: GHSA-28pq-6qxg-wg5r – extend request body size cap to all JSON API endpoints
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]