billchurch/webssh2 webssh2-server-v5.1.0

webssh2-server: v5.1.0

on GitHub

5.1.0 (2026-06-17)

Features

• http: cache headers for static assets, no-store for dynamic HTML (#545) (ffe55c3), closes #537
• security: JSON config-block injection + tightened CSP (#546) (#551) (33201a0)
• security: verify webssh2_client bundle integrity + provenance (#547) (#553) (b4c918e)
• security: warn loudly at startup on permissive security defaults (#542) (29f7ba4)

Bug Fixes

• config: honor WEBSSH2_SESSION_SECRET in fallback, warn on generated secret (#541) (59e34aa)
• deps: bump brace-expansion to patched versions (#540) (1868a6d), closes #538
• ssh: add shared settled guard to connect timeout/ready/error race (#544) (89a5590), closes #536