COMMITS
September 29, 2026
M
VULN-141859: Normalize request path when using access rules
Miguel da Costa Martins Marcelino committed
September 25, 2026
D
chore: stabilize websocket event tests
Devin Carr committed
September 28, 2026
M
chore: Retry DNS resolution
Miguel da Costa Martins Marcelino committed
August 24, 2026
J
TUN-10808: Cancel QUIC reads when request bodies close
João "Pisco" Fernandes committed
September 24, 2026
J
Release 2026.9.3
João "Pisco" Fernandes committed
J
chore: Update dependencies
João "Pisco" Fernandes committed
J
Release 2026.9.2
João "Pisco" Fernandes committed
J
TUN-10798: Harden protected Quick Tunnel CLI behavior
João "Pisco" Fernandes committed
M
TUN-10926: Broker JWKS cache expiration
Miguel da Costa Martins Marcelino committed
September 22, 2026
J
chore: Enable --allowed-mail flag and mac runners
João "Pisco" Fernandes committed
M
chore: Avoid logging request body
Miguel da Costa Martins Marcelino committed
M
TUN-10805: Strip authentication data before forwarding requests
Miguel da Costa Martins Marcelino committed
R
Update gcr.io/distroless/base-debian13:nonroot Docker digest to 0896741
Renovate committed
R
September 23, 2026
M
chore: Add upper bounds to supplied emails
Miguel da Costa Martins Marcelino committed
M
chore: Protect headers before flush
Miguel da Costa Martins Marcelino committed
M
chore: Limit response size
Miguel da Costa Martins Marcelino committed
September 21, 2026
A
TUN-10804: Enforce authentication before origin access
Alessandro Frigerio committed
A
TUN-10803: Wire Quick Tunnel callback authorization
Alessandro Frigerio committed
A
TUN-10803: Authorize Quick Tunnel callbacks
Alessandro Frigerio committed
A
TUN-10803: Add Quick Tunnel recipient policy
Alessandro Frigerio committed
September 17, 2026
A
TUN-10802: Manage process-local authentication sessions
Alessandro Frigerio committed
M
Revert "chore: Fix unbounded channel"
Miguel da Costa Martins Marcelino committed
M
chore: Fix unbounded channel
Miguel da Costa Martins Marcelino committed
September 16, 2026
A
TUN-10801: Validate quick tunnel broker assertions
Alessandro Frigerio committed
A
TUN-10801: Cache quick tunnel broker JWKS
Alessandro Frigerio committed
A
TUN-10800: Wire Quick Tunnel authentication redirects
Alessandro Frigerio committed
A
chore: Update gRPC to v1.83.1
Alessandro Frigerio committed
September 15, 2026
A
TUN-10800: Consume authentication callback state
Alessandro Frigerio committed
A
TUN-10800: Add browser-bound login state
Alessandro Frigerio committed