Watchman 1.2.1 lets operators turn off or token-protect /debug/pprof on the admin port.
Admin
- admin:
Watchman.Servers.Pprofis passed toadmin.New(moov-io/base v0.64.0). Omit the key and pprof stays as it is today: every profile on the admin port, no auth. SetEnabled: falseto drop/debug/pprof, or setSecretso callers sendAuthorization: BearerorX-Pprof-Token. Heap dumps can include loaded list records. by @adamdecaf in #945
Search result impact
- Search scores are unchanged.
Docs
- docs: pprof config on Configuration, Network access, and README
Fixes
- deps: renovate updates (moov-io/base, openrouter go-sdk)
Full Changelog: v1.2.0...v1.2.1