chore: release prep for 2.4.1 - #790
Merged
Merged
Conversation
Security release notes for GHSA-93hc-xq3w-xw87 and GHSA-vq29-8q3c-3hrm, plus the two same-class issues found while fixing them. Also corrects the 2.4.0 A2A entry, which claimed "sub remains the user". That was never true of an agent-to-agent exchange, where the subject is the delegated service account — the misstatement is the invariant the delegation bug was built on. Carries the migration note for --trusted-proxies: it now governs client-IP resolution everywhere, so a proxied deployment that never set it will see audit IPs and the admin lockout collapse onto the proxy address. Claude-Session: https://claude.ai/code/session_016dbRdiyrapnT7J3tAyZhdR
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
CHANGELOG for the 2.4.1 security release (#788, #789), plus a correction to a 2.4.0 entry.
What is in 2.4.1
>= 2.4.0-rc.162.3.0-rc.10,>= 2.4.0-rc.0required_relationsevaluates a machine token as a user2.3.0-rc.10,>= 2.4.0-rc.0The last one was found in adversarial review, is in neither report, and needs no delegation — a plain
client_credentialstoken reaches it.Corrected 2.4.0 entry
The A2A delegation bullet said "
subremains the user". That was never true of an agent→agent exchange, where the subject is the delegated service account — and that misstatement is precisely the invariant the delegation bug was built on. Reworded to name the subject correctly and to point at 2.4.1.Migration note
--trusted-proxiesnow governs client-IP resolution everywhere, not just gin's rate limiter. A proxied deployment that never set it will see audit-log IPs and the admin-secret lockout collapse onto the proxy address. It was already load-bearing for rate limiting, so this makes resolution consistent — but it must now be set, and every hop must be listed (CDN and load balancer both). Startup warns when it is empty.https://claude.ai/code/session_016dbRdiyrapnT7J3tAyZhdR