Repository navigation

Hardening 2026-10: dependency upgrades, security & HTTP correctness fixes - #14

Merged

jkyberneees merged 21 commits into

mainfrom

hardening/2026-10

Oct 27, 2026

Merged

Hardening 2026-10: dependency upgrades, security & HTTP correctness fixes#14
jkyberneees merged 21 commits into
mainfrom
hardening/2026-10

Commits on Oct 27, 2026
- chore(deps): upgrade fasthttp 1.77.0, klauspost/compress 1.20.3
  
  jkyberneees
  and
  claude
  committed
  d69aff4
- docs: add 2026-10 hardening plan from expert review panel
  
  jkyberneees
  and
  claude
  committed
  290572f
- fix(handler): bound multi-range requests and return 416 for unsatisfiable ranges
  jkyberneees
  committed
  fe51984
- fix(compress): never re-encode 206/streamed responses; RFC-compliant Accept-Encoding parsing
  jkyberneees
  committed
  503fa80
- fix(server): return listen and TLS keypair errors from Start
  
  jkyberneees
  and
  claude
  committed
  77cf319
- feat(config): add Config.Validate and report invalid env values
  
  jkyberneees
  and
  claude
  committed
  4b9121e
- fix(cmd): exit non-zero on startup failure and keep flags on SIGHUP
  
  jkyberneees
  and
  claude
  committed
  51134a2
- docs: document config validation, strict --config and SIGHUP scope
  
  jkyberneees
  and
  claude
  committed
  727cea3
- fix(server): use tcp listener for IPv6 and hostname addresses
  
  jkyberneees
  and
  claude
  committed
  335d707
- fix(security): validate directory index path and never cache unverified paths
  jkyberneees
  committed
  89929b4
- ci: pin tools, add gofmt/staticcheck/tidy checks and dependabot
  
  jkyberneees
  and
  claude
  committed
  1fc6708
- fix(headers): merge Vary tokens, full 304 headers, weak ETag comparison, HEAD length parity
  jkyberneees
  committed
  cdadfbc
- fix(handler): honour If-Range; answer OPTIONS with 204 and send Allow on 405
  jkyberneees
  committed
  27f1d3c
- fix(handler): stream large files with validators and 304; bound sidecar size
  jkyberneees
  committed
  86c3a22
- fix(cache): stat symlink targets in preload; compare-and-remove expired entries
  jkyberneees
  committed
  587a1e0
- fix(handler): conditional requests for embedded default assets
  jkyberneees
  committed
  b884131
- Merge branch 'ops-hardening' into HEAD
  jkyberneees
  committed
  6cf69f1
- docs: record hardening plan status
  
  jkyberneees
  and
  claude
  committed
  f0196d3
- ci: build and test with the latest stable Go
  
  jkyberneees
  and
  claude
  committed
  ae35391
- fix(handler): re-check root containment at file sinks; guard int conversion
  
  jkyberneees
  and
  claude
  committed
  d2bbda7
- fix(handler): place large-file containment check inside the open helper
  
  jkyberneees
  and
  claude
  committed
  6ed041f

Commits

Commits on Oct 27, 2026