Thanks to @vinzabe for reporting some security issues.
New
- Support HEAD for link handler by @SinTan1729 in 391de81
- Better support for Unicode in notes and filter by @SinTan1729 in bf9600d
- Added support for Sha512 hashes by @SinTan1729 in 77ee551
- Limit spawned threads using semaphores by @SinTan1729 in bb7073d
Fixes
- Adjust auth concurrency using Argon2 memory needs by @SinTan1729 in f420393
- Exit on bad auth by @SinTan1729 in eb72aaf
- Name pairing order by @SinTan1729 in 0b72a92
- Delete legacy backups during cleanup by @SinTan1729 in 9f4c2ac
- Improve logging behavior by @SinTan1729 in 5d458ad
- OIDC error printing by @SinTan1729 in 6c98a20
- Lazy evaluation of error for password verification by @SinTan1729 in 2988d20
- Decode hex for SHA512 API keys by @SinTan1729 in 5b40f42
- Deal with no scheme but port in site url by @SinTan1729 in 3060e0a
Frontend
- Punycode module no longer needed by @SinTan1729 in 66be01d
- Fix race condition for site url by @SinTan1729 in 7eaedb1
Changes
- Debug logs for config, whoami etc. by @SinTan1729 in 137cdd1
- Notes field uses textarea now by @SinTan1729 in f884366
- Use constants for default ports by @SinTan1729 in 770ae83
- Setting health port to 0 disables it by @SinTan1729 in e30f97b
- Added config for changing the health port by @SinTan1729 in bdfac96
- Limit batch inserts to API key auth by @SinTan1729 in 0d86cd7
- Only use spawn_blocking for Argon2 by @SinTan1729 in d7e441a
- Permit acquisition behavior by @SinTan1729 in 8f20b0d
- Refactor credential validation code into a method by @SinTan1729 in 6169ae0
- Do not print custom claim info to logs by @SinTan1729 in 5618590
- Use base64-url encoding for sha512 hashes by @SinTan1729 in ce6138c
- Better health checking by @SinTan1729 in 8ce6969
- Added hard limit of 2000 links per single insert by @SinTan1729 in 9a0e591
- Use stub is_valid for pool by @SinTan1729 in 91ca1f1
- Log database open error properly by @SinTan1729 in 08aeba3
Optimization
- Factor out some configs only needed for init into their own struct by @SinTan1729 in c239d55
- Switched from subtle to constant_time_eq by @SinTan1729 in 115a0c2
Full Changelog: 7.10.8...7.11.0
Docker Hub
GHCR