tis24dev/proxsave v0.23.1

on GitHub

Release Notes

• New Features

  • Added ECDSA P-256 release signature verification for enhanced security; install.sh and proxsave --upgrade now validate release authenticity before installation.
  • Added --env-migration tooling for migrating legacy backup.env configurations to Go.
  • Added support for node-local debug queries to collect certificate and endpoint data.

• Bug Fixes

  • Improved cron entry migration to preserve schedules and handle legacy entrypoints safely.
  • Fixed symlink cleanup logic to avoid removing non-symlink files.
  • Certificate output changed to JSON for improved consistency.
  • Improved S3 endpoint handling to avoid unsafe path traversal and more reliable bucket collection.
  • Updated PBS version detection to a more robust command form.

• Documentation

  • Added release signature verification guide and manual verification steps.
  • Updated migration guide to focus on config migration via --env-migration.
  • Removed legacy Bash version documentation.

• Chores

  • Removed smart chunking optimization feature; simplified configuration model.
  • Tightened filesystem permissions (0750) for improved security.
  • Updated Go dependency to 1.25.11.
  • Strengthened release signing validation and simplified temporary key cleanup.

Changelog

• b49819f Harden PBS metadata collection via proxmox-backup-debug, and release-key validation (#230)