v0.47.x
over 5 years ago by Lee Skillen
The main event for this release is: Support for repository-only custom domains and longer entitlements!
See the changelog for additional details.
Changelog
- added: Critical Captchas: Captchas and additional workflow has been added to critical forms that can impact security (e.g. transfer/rename/deletion of accounts and repositories, changing security settings such as 2FA, etc.)
- added: Repository-Only Custom Domains: Custom domains can now be pinned to a specific repository, rather than across an entire account. This means that you can have a different custom domain for downloads (or a native API) between multiple repositories.
- added: Longer Entitlement Tokens: Entitlement tokens may now be anywhere between 8 characters (shorter than before) upto 36 characters (longer than before).
- fixed: 2FA Session Fixation: The alteration in state for 2FA enrollment will now affect session management for logins. If you disable or enable 2FA for an account, it will now logout all other existing sessions for that account.
- added: Extra Webhook Headers: Webhooks can now be sent with an additional 2 extra headers, for external services that require them (e.g. GitHub Actions).
- added: Manual 2FA Setup: Two-factor authentication can now be setup manually using a security key, in addition to the existing QR code based approach.