@hasna/uptime 0.1.10 → 0.1.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -6,6 +6,47 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
6
 
7
7
  ## [Unreleased]
8
8
 
9
+ ## [0.1.12] - 2026-06-28
10
+
11
+ ### Added
12
+
13
+ - Added hosted HTTP runtime target-policy checks through `runHostedHttpCheck`.
14
+ The runner resolves DNS at execution time, rejects denied answers, pins the
15
+ validated address into the request, validates redirects, and records
16
+ target-policy decision evidence.
17
+ - Added `isBrowserPageEvidence` and `isHttpTargetPolicyEvidence` SDK helpers for
18
+ narrowing the expanded `CheckEvidence` union.
19
+
20
+ ### Changed
21
+
22
+ - Tightened hosted target policy coverage for reserved IPv4 documentation and
23
+ benchmark ranges plus IPv4-compatible, translation, transition, documentation,
24
+ and other special-purpose IPv6 forms.
25
+ - Updated AWS planning and runbook docs so public probes remain blocked until
26
+ cloud check-job workers are wired to the hosted HTTP runner and validated in
27
+ AWS.
28
+
29
+ ## [0.1.11] - 2026-06-28
30
+
31
+ ### Changed
32
+
33
+ - Added Terraform outputs for log groups, web alarms, backup vault, and backup
34
+ plan, KMS key ARN, and secret refs so the AWS runbook can use output-driven
35
+ commands.
36
+ - Expanded the AWS deployment runbook restore drill with AWS Backup restore-job,
37
+ polling, staging mount-target, validation, and cleanup steps.
38
+ - Made the AWS runbook command blocks use explicit shell variables and
39
+ consistent Terraform working-directory flags.
40
+ - Hardened hosted target policy to normalize IPv4-mapped IPv6 literals before
41
+ rejecting loopback, private, link-local, metadata, carrier-grade NAT,
42
+ unspecified, and multicast IPv4 ranges.
43
+ - Hardened hosted target policy to reject the full IPv6 link-local `fe80::/10`
44
+ range.
45
+ - Scoped hosted import preview lookups by workspace so preview responses cannot
46
+ reveal monitors from another hosted workspace.
47
+ - Documented DNS resolution, redirect, and rebinding enforcement as required
48
+ gates before enabling hosted public probe execution.
49
+
9
50
  ## [0.1.10] - 2026-06-28
10
51
 
11
52
  ### Changed