RDODCP-914: Chisel Upstream Sync (v1.12.1) + Security Fixes - #61
Closed
anurag-outsystems wants to merge 9 commits into
Closed
RDODCP-914: Chisel Upstream Sync (v1.12.1) + Security Fixes#61anurag-outsystems wants to merge 9 commits into
anurag-outsystems wants to merge 9 commits into
Conversation
Reliability, security, and observability across client/server/tunnel: keepalive ping timeouts, TCP half-close propagation, dial-before-accept, graceful SIGTERM shutdown, UDP flow-cap sweep, pre-auth WS size cap, SOCKS ACL enforcement + live authfile reload, exact legacy-fingerprint match, --auth validation, session/failed-login logs, jpillora#608 panic fix, goreleaser multi-arch Docker images, and a two-stage release pipeline (draft + versioned images at tag time; latest promoted on publish). Full detail: 1.12-changes.md, the PR (34 commits), and https://jpillora.com/chisel-112-ux-review Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- remove the local opts module replacement\n- upgrade opts to v1.8.1 for margin-aware help wrapping\n\nCo-Authored-By: Codex GPT-5 <noreply@openai.com>
- build releases with Go 1.27.0 - update x/crypto to v0.55.0 for GO-2026-6303 Co-Authored-By: Codex GPT-5.2 <noreply@openai.com>
- record only listener peers observed from inbound UDP - expire and cap peer state, rejecting untrusted destinations - cover reverse UDP flow and destination validation Co-Authored-By: Codex GPT-5 <noreply@openai.com>
OutSystems uses Azure DevOps for releases with security scanning. The upstream promote.yml workflow references jpillora registries and conflicts with our release pipeline. Applied merge=ours strategy (same as ci.yml) to preserve our empty file during future upstream syncs.
…HIGH severity vulnerabilities blocking Azure pipeline: - GO-2026-6354: SSH security issue - GO-2026-6355: SSH security issue The v0.55.0 update only fixed GO-2026-6303. This completes the security patch by upgrading to v0.56.0 which addresses all remaining HIGH CVEs in golang.org/x/crypto. No breaking changes - tested with existing test suite.
anurag-outsystems
requested review from
sergioalmeida-rgi
and removed request for
a team
September 4, 2026 09:55
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio. Pull Request Developer GuidanceQuestions? See the Wiz FAQ. Please contact the Security Office if you encounter issues with Wiz pull request scanning. |
Author
|
Closing - created clean PR with only crypto v0.56.0 fix (2 files changed instead of 65) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
RDODCP-914: Chisel Upstream Sync (v1.12.1) and Dependency Updates
Summary
Syncs OutSystems Chisel fork with upstream v1.12.1, bringing reliability improvements, security fixes, and dependency updates.
Key Changes
Security & Reliability:
Features:
Dependencies:
Fork-Specific Exclusions:
Files Changed
65 files changed: +4,488 insertions, -682 deletions
Upstream Sync Status
Synced commits: 7/7 relevant upstream commits from v1.11.7 → v1.12.1
Excluded: 3 upstream CI/release pipeline commits specific to jpillora/chisel
Testing