What's Changed
Security
- Migrate
go-viper/mapstructurev1 to v2.4.0 — fixes GO-2025-3787 and GO-2025-3900 (sensitive information leak in logs when processing malformed data) (#544)
Fixed
- Release pipeline migrated from
slsa-github-generatortoactions/attest-build-provenancevia org-wide reusable workflow atnetresearch/.github(#542). This fixes the v0.23.0 release which had no binaries due to SHA-pinning conflict.
Note: v0.23.0 was released without binaries due to the pipeline issue fixed in this release. Users should use v0.23.1 instead.