moonrepo/proto v0.63.2

0.63.2

on GitHub

Release Notes

🛡️ Security

• Distrusted the 8 compromised eMudhra intermediate CA keys, and removed the "emSign ECC Root CA - G3" root from our bundled root certificates. Previously, anyone in a position to intercept a connection could use these keys to forge a certificate for any host, and proto would accept it on Linux, and on all platforms for plugins that make requests through Extism's built-in HTTP functions.
  • Hosts with certificates that chain to "emSign ECC Root CA - G3" will now fail TLS verification.
  • Requests to OCI registries on Linux still rely on the system certificate bundle, so update your ca-certificates package.

🚀 Updates

• Improved download throughput on high-latency connections by increasing the HTTP/2 flow-control windows. Previously, a single download over HTTP/2 was capped at about 2 MiB per round trip.
  • Over a local link with 200ms or 400ms of added latency, a 64 MB download is about 5x faster (from 9 to 47 MB/s at 200ms).

🐞 Fixes

• Fixed Git sources (for backends and build from source) failing to check out a reference that is not the default branch, like a tag, as the shallow clone did not fetch it.

Install proto_cli 0.63.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/moonrepo/proto/releases/download/v0.63.2/proto_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/moonrepo/proto/releases/download/v0.63.2/proto_cli-installer.ps1 | iex"

Download proto_cli 0.63.2