github Power2All/torrust-actix v4.2.21
Release v4.2.21

4 hours ago

What's Changed

v4.2.21

  • Bumped versions.
  • Dropped the unmaintained rustls-pemfile (RUSTSEC-2025-0134) for the PEM support already in rustls-pki-types; TLS key files may now be PKCS#8, PKCS#1 or SEC1 everywhere, including the cluster master.
  • Security: /scrape without a key is now refused when keys_enabled is set, matching /announce.
  • Security: cluster WebSocket connections that never complete the handshake are dropped after 30 seconds instead of holding a connection slot forever.
  • Fixed two lifetime bugs and an alignment bug in the Windows RIO receive backend.
  • The UDP hot path no longer builds a Sentry transaction per datagram when tracing is off.
  • hex2bin rejects over-long input instead of silently truncating it to the first 20 bytes, and no longer reports malformed client input to Sentry.
  • The announce path no longer aborts the process when the system clock sits before the UNIX epoch; it now uses the shared current_time() helper.
  • Added the official Discord server: https://discord.gg/rC7aEtpwMX

Full Changelog: v4.2.20...v4.2.21

Don't miss a new torrust-actix release

NewReleases is sending notifications on new releases.