This release fixes a problem where the GitHub token that EasyBuild uses for some of the GitHub integration features (like --from-pr
, --new-pr
, etc.) got included in plain text in the 'top-level' EasyBuild log file when the --debug
configuration option is enabled, potentially leaving it exposed to be used by others.
We strongly encourage that you revoke the GitHub tokens you are using currently, via https://github.com/settings/tokens, and to replace them using a new token (using "eb --install-github-token --force").
More information is available in the security advisory that was published.
Detailed release notes at https://easybuild.readthedocs.io/en/latest/Release_notes.html#easybuild-v4-1-2-march-16th-2020 .