bdo-cli 0.48.0 → 0.48.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +22 -0
- package/README.md +1 -1
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,28 @@ All notable changes to Bushido (bdo) will be documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [0.48.1] (2026-10-21)
|
|
9
|
+
|
|
10
|
+
### Security
|
|
11
|
+
|
|
12
|
+
- **Hook permission gate: ANSI-C quoting and line-continued substitutions are
|
|
13
|
+
never auto-allowed.** `$'...'` quoting can hide real separators behind
|
|
14
|
+
escaped quotes (`git status $'a\'b'; other-cmd; echo $'c\'d'` looked like
|
|
15
|
+
one allowed `git status`), and a backslash-newline between `$`/`<`/`>` and
|
|
16
|
+
`(` (`$\⏎(…)`) slipped a command substitution past the gate, letting two
|
|
17
|
+
allowed commands combine (`git log $\⏎(echo --output=/path)` writes a file).
|
|
18
|
+
Both now defer to the agent's own permission prompt, across the Claude,
|
|
19
|
+
Cursor, Gemini and Copilot hooks.
|
|
20
|
+
- **rustls-webpki 0.103.15 → 0.103.16 and webpki-roots 1.0.6 → 1.0.10**
|
|
21
|
+
(via `ureq`), fixing RUSTSEC-2026-0382 (certificate verification may accept
|
|
22
|
+
distrusted intermediates) and RUSTSEC-2026-0381 (bundled roots trust
|
|
23
|
+
distrusted emSign intermediates). Caught by the daily scheduled audit.
|
|
24
|
+
- **`bdo curl` no longer buffers a whole response in memory.** Piped / redirected
|
|
25
|
+
output now goes straight from curl to the consumer (bytes arrive before the
|
|
26
|
+
transfer ends, exit status and failure bodies unchanged). On a terminal,
|
|
27
|
+
bdo captures at most 16 MiB to summarize; a larger response is streamed
|
|
28
|
+
byte-exact instead of growing memory without bound.
|
|
29
|
+
|
|
8
30
|
## [0.48.0] (2026-10-17)
|
|
9
31
|
|
|
10
32
|
### Features
|
package/README.md
CHANGED
|
@@ -104,7 +104,7 @@ gh attestation verify bushido-aarch64-apple-darwin.tar.xz --repo tedorigawa001/T
|
|
|
104
104
|
### Verify Installation
|
|
105
105
|
|
|
106
106
|
```bash
|
|
107
|
-
bdo --version # Should show "bdo 0.48.
|
|
107
|
+
bdo --version # Should show "bdo 0.48.1"
|
|
108
108
|
bdo gain # Should show token savings stats
|
|
109
109
|
```
|
|
110
110
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"artifactDownloadUrls": [
|
|
3
|
-
"https://github.com/tedorigawa001/TokenReductionTool-BDO/releases/download/v0.48.
|
|
3
|
+
"https://github.com/tedorigawa001/TokenReductionTool-BDO/releases/download/v0.48.1"
|
|
4
4
|
],
|
|
5
5
|
"author": "Patrick Szymkowiak",
|
|
6
6
|
"bin": {
|
|
@@ -91,7 +91,7 @@
|
|
|
91
91
|
"zipExt": ".tar.xz"
|
|
92
92
|
}
|
|
93
93
|
},
|
|
94
|
-
"version": "0.48.
|
|
94
|
+
"version": "0.48.1",
|
|
95
95
|
"volta": {
|
|
96
96
|
"node": "18.14.1",
|
|
97
97
|
"npm": "9.5.0"
|