bdo-cli 0.48.2 → 0.48.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -0
- package/README.md +1 -1
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,18 @@ All notable changes to Bushido (bdo) will be documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [0.48.3] (2026-10-27)
|
|
9
|
+
|
|
10
|
+
### Security
|
|
11
|
+
|
|
12
|
+
- **sha2 0.10 → 0.11**, which moves `block-buffer` from 0.10.4 to 0.12.1 and
|
|
13
|
+
fixes GHSA-qwgh-2vcv-g2f7 (a caught panic inside a compression callback
|
|
14
|
+
could corrupt the buffer position; not reachable from bdo, which never
|
|
15
|
+
hashes inside `catch_unwind`). Found by an OSV scan; it has no RustSec ID
|
|
16
|
+
yet, so `cargo audit` did not report it. Hashes are unchanged — the three
|
|
17
|
+
call sites now share one `sha256_hex` helper pinned by FIPS test vectors,
|
|
18
|
+
so stored hook-integrity, trust and device hashes stay valid.
|
|
19
|
+
|
|
8
20
|
## [0.48.2] (2026-10-25)
|
|
9
21
|
|
|
10
22
|
### Security
|
package/README.md
CHANGED
|
@@ -119,7 +119,7 @@ gh attestation verify "$(brew --cache bushido)" --repo tedorigawa001/TokenReduct
|
|
|
119
119
|
### Verify Installation
|
|
120
120
|
|
|
121
121
|
```bash
|
|
122
|
-
bdo --version # Should show "bdo 0.48.
|
|
122
|
+
bdo --version # Should show "bdo 0.48.3"
|
|
123
123
|
bdo gain # Should show token savings stats
|
|
124
124
|
```
|
|
125
125
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"artifactDownloadUrls": [
|
|
3
|
-
"https://github.com/tedorigawa001/TokenReductionTool-BDO/releases/download/v0.48.
|
|
3
|
+
"https://github.com/tedorigawa001/TokenReductionTool-BDO/releases/download/v0.48.3"
|
|
4
4
|
],
|
|
5
5
|
"author": "Patrick Szymkowiak",
|
|
6
6
|
"bin": {
|
|
@@ -91,7 +91,7 @@
|
|
|
91
91
|
"zipExt": ".tar.xz"
|
|
92
92
|
}
|
|
93
93
|
},
|
|
94
|
-
"version": "0.48.
|
|
94
|
+
"version": "0.48.3",
|
|
95
95
|
"volta": {
|
|
96
96
|
"node": "18.14.1",
|
|
97
97
|
"npm": "9.5.0"
|