🎉 Stable Release v3.5.47
Multi-Architecture Binaries
Download the appropriate binary for your platform:
- Linux x86_64:
better-ccflare-linux-amd64 - Linux ARM64 (Raspberry Pi 3/4/5, Oracle Cloud ARM, AWS Graviton):
better-ccflare-linux-arm64 - macOS Intel:
better-ccflare-macos-x86_64 - macOS Apple Silicon:
better-ccflare-macos-arm64 - Windows x86_64:
better-ccflare-windows-x64.exe
Installation
# Linux x86_64
wget https://github.com/tombii/better-ccflare/releases/download/v3.5.47/better-ccflare-linux-amd64
chmod +x better-ccflare-linux-amd64
./better-ccflare-linux-amd64
# macOS Apple Silicon (ARM64)
curl -L -o better-ccflare-macos-arm64 https://github.com/tombii/better-ccflare/releases/download/v3.5.47/better-ccflare-macos-arm64
chmod +x better-ccflare-macos-arm64
xattr -d com.apple.quarantine better-ccflare-macos-arm64 # Required for unsigned binaries
./better-ccflare-macos-arm64macOS Users: The xattr command is required to bypass Gatekeeper for unsigned binaries. If you prefer not to run unsigned binaries, install from source instead.
Or install via npm: npm install -g better-ccflare@v3.5.47
What's Changed
🚀 Features
- feat(health): expose build-time provenance (#109) (
38e007c9) - feat: multi-instance guard warns when another live process shares the DB (#351) (
bf4a2f54)
🐛 Bug Fixes
- fix(auth): address PR #379 review findings (secret race, token exposure, timing-safe compare) (
079a015c) - fix: use a narrower validator for workspace-path segments (PR #378 review) (
1902fe84) - fix(auth): prevent orphaned SSE connections on overlapping reconnects (PR #379 review) (
3244f31d) - fix(docker): wire up build provenance env vars for /health [skip-version] (
325599c5) - fix: clear own heartbeat before refusing in multi-instance guard (
700155c3) - fix(docs): address Greptile P1 review findings on deployment guide (
846750d6) - fix(dashboard): satisfy ZaiUsageWindow shape in RateLimitProgress test (
8d166f73) - fix: detect control chars before stripping in workspace-path validation (PR #378 round-3 review) (
a073df04) - fix: reject any whitespace in workspace-path segments (PR #378 round-2 review) (
b2810b37) - fix(auth): exempt internal self-loop flows from API-key auth (#216) (
bc6ed353) - fix(release): credit contributors regardless of merge style [skip-version] (
d2287479) - fix(auth): recover log-stream token consumption on SSE reconnect (PR #379 review) (
d4651a5e) - fix(providers): treat sub-second reset jitter as the same usage window (
dce38dc6) - fix(docs): resolve K8s multi-pod example contradicting single-instance rule (
f4607bdb)
🔒 Security
- security: validate workspace-path project names against isLowRiskProjectSlug (fixes #373) (
2f715272)