This release adds 1 notable feature for engineering teams evaluating rollout.
Published 2d
Dashboards & Home Pages
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
bitcoin
bitcoin-node
lightning-node
p2p
personal-server
privacy-enhancing-technologies
+1 more
self-hosted
Summary
AI summaryAdded sdk.host.getBridgeAddress to resolve container dependency addresses.
Full changelog
What's Changed
Added
sdk.host.getBridgeAddressresolves the address another container reaches a
dependency at, replacing a helper every package was copy-pasting. Packages
resolved a dependency by readingbindings[<internalPort>].net.assignedPort
and prefixinggetOsIp. That field is raw metadata: only one of
assignedPort/assignedSslPortis ever populated, and which one is a
property of how the dependency bound the port — a binding withaddSsland
secure.sslfreesassignedPortentirely and carries only
assignedSslPort, a passthrough binding is the reverse. So every caller was
implicitly asserting how its dependency terminates TLS, and resolvednull
the day that changed, which is exactly what happened to LND's dependents when
LND moved its REST interface behind the OS reverse proxy. The new helper
resolves the binding's own derived address instead, which is correct under
either arrangement, and returns aWatchableso callers get the same
const/once/watch/onChange/waitForstrategies assdk.host.get.
Because it keys off the binding rather than an exported interface, it also
resolves bridge-only ports such as tor's SOCKS proxy.sslnarrows a binding
that publishes both a plaintext and a TLS address (protocol: 'http'/'ws',
orsecure: nullwithaddSsl— bitcoind's RPC is reachable at both);
fallbackPortkeeps the value non-null while the dependency is absent, for a
flag that must be passed unconditionally against an allocator-guaranteed port
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About StartOS
Browser-based, graphical Operating System (OS) that makes running a personal server as easy as running a personal computer.
Related context
Related tools
Earlier breaking changes
- vstart-sdk/v2.0.4 'setupMain' callback now accepts any DaemonBuildable rather than requiring a Daemons.
- vstart-sdk/v2.0.4 `Daemons.dynamic` now takes `effects` and returns a `DaemonReconciler` instead of replacing `main`.
- v0.4.0-beta.9 Previous backups incompatible with v0.4.0; create fresh backup after updating.
Beta — feedback welcome: [email protected]