Bug Fixes
Refresh TLS trust following the eMudhra/emSign CA incident
Updated TLS certificate verification dependencies and refreshed certificate trust stores in distributed container images to address the eMudhra/emSign certificate authority key compromise. The updated WebPKI verifier rejects the compromised intermediate keys, and affected roots are removed from the Nix development environment's CA bundle.
Operators should upgrade their SpacetimeDB binaries and container images. See the RustSec advisory for details about the upstream incident.
(#6366)
Preserve UUID and branded primitive types in TypeScript
TypeScript type inference now preserves Uuid values and branded primitives instead of expanding them into structural records. UUID columns retain their Uuid type, and branded strings remain assignable to string. This is a types-only fix with no runtime behavior change.
(#5971)
Restore Nix development builds
Updated the Nix flake to Rust 1.97.1 and pinned the required wasm-bindgen version, restoring the Nix development workflow.
(#6344)
What's Changed
- Updated TLS verification dependencies and container trust stores following the eMudhra/emSign CA incident in #6366
- Fixed TypeScript inference for UUIDs and branded primitives in #5971
- Restored Nix development builds in #6344
Full public changelog: v2.14.0...v2.14.1