Changelog
Security updates
- 0b1b1ff: sec(git): redact URL credentials from diagnostics (#7294)
- 9a037e1: sec(srpm): reject RPM macros in package versions (#7295)
- fb9617b: sec: redact hook and chocolatey secrets from logs (#7293)
Bug fixes
- 0946e5e: fix(aur): install every binary of the archive in the default package (#7284)
- 79c8d68: fix(client): defer SSH private-key expansion until publishing (#7273)
- e46cd64: fix(docs): remove duplicate prebuilt redirects
- 5f422b1: fix(ko): accept '..' as main path (#7279)
- a8f1c1e: fix(ko): prefer remote base images and don't cache failed lookups (#7275)
- 3432e8d: fix(mcp): retry publish when package version is not yet visible (#7283)
- 119f88f: refactor(ko): simplify template handling (#7277)
Documentation updates
Other work
Full Changelog: v2.20.0...v2.21.0-119f88f6-nightly