What's Changed
v4.2.21
- Bumped versions.
- Dropped the unmaintained
rustls-pemfile(RUSTSEC-2025-0134) for the PEM support already inrustls-pki-types; TLS key files may now be PKCS#8, PKCS#1 or SEC1 everywhere, including the cluster master. - Security:
/scrapewithout a key is now refused whenkeys_enabledis set, matching/announce. - Security: cluster WebSocket connections that never complete the handshake are dropped after 30 seconds instead of holding a connection slot forever.
- Fixed two lifetime bugs and an alignment bug in the Windows RIO receive backend.
- The UDP hot path no longer builds a Sentry transaction per datagram when tracing is off.
hex2binrejects over-long input instead of silently truncating it to the first 20 bytes, and no longer reports malformed client input to Sentry.- The announce path no longer aborts the process when the system clock sits before the UNIX epoch; it now uses the shared
current_time()helper. - Added the official Discord server: https://discord.gg/rC7aEtpwMX
Full Changelog: v4.2.20...v4.2.21