From b15e90d80b6bed6d2f47e723d945afc8542a4a30 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sat, 25 Apr 2026 04:32:14 +0000 Subject: [PATCH 1/2] chore(release): version packages --- .changeset/bump-rustls-webpki.md | 11 ----------- packages/postagent-core/Cargo.lock | 2 +- packages/postagent-core/Cargo.toml | 2 +- packages/postagent-darwin-arm64/CHANGELOG.md | 8 ++++++++ packages/postagent-darwin-arm64/package.json | 2 +- packages/postagent-darwin-x64/CHANGELOG.md | 8 ++++++++ packages/postagent-darwin-x64/package.json | 2 +- packages/postagent-linux-arm64-gnu/CHANGELOG.md | 8 ++++++++ packages/postagent-linux-arm64-gnu/package.json | 2 +- packages/postagent-linux-x64-gnu/CHANGELOG.md | 8 ++++++++ packages/postagent-linux-x64-gnu/package.json | 2 +- packages/postagent/CHANGELOG.md | 8 ++++++++ packages/postagent/package.json | 2 +- 13 files changed, 47 insertions(+), 18 deletions(-) delete mode 100644 .changeset/bump-rustls-webpki.md diff --git a/.changeset/bump-rustls-webpki.md b/.changeset/bump-rustls-webpki.md deleted file mode 100644 index 1cd2718..0000000 --- a/.changeset/bump-rustls-webpki.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -"postagent": patch -"postagent-darwin-arm64": patch -"postagent-darwin-x64": patch -"postagent-linux-arm64-gnu": patch -"postagent-linux-x64-gnu": patch ---- - -chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. - -Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. diff --git a/packages/postagent-core/Cargo.lock b/packages/postagent-core/Cargo.lock index 71ab3d1..6ed02bf 100644 --- a/packages/postagent-core/Cargo.lock +++ b/packages/postagent-core/Cargo.lock @@ -934,7 +934,7 @@ checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd" [[package]] name = "postagent-core" -version = "0.3.2" +version = "0.3.3" dependencies = [ "base64", "chrono", diff --git a/packages/postagent-core/Cargo.toml b/packages/postagent-core/Cargo.toml index 1995961..a755515 100644 --- a/packages/postagent-core/Cargo.toml +++ b/packages/postagent-core/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "postagent-core" -version = "0.3.2" +version = "0.3.3" edition = "2021" [[bin]] diff --git a/packages/postagent-darwin-arm64/CHANGELOG.md b/packages/postagent-darwin-arm64/CHANGELOG.md index 0c2a750..7261bc1 100644 --- a/packages/postagent-darwin-arm64/CHANGELOG.md +++ b/packages/postagent-darwin-arm64/CHANGELOG.md @@ -1,5 +1,13 @@ # postagent-darwin-arm64 +## 0.3.3 + +### Patch Changes + +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. + + Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. + ## 0.3.2 ### Patch Changes diff --git a/packages/postagent-darwin-arm64/package.json b/packages/postagent-darwin-arm64/package.json index e0c4c69..b5fd116 100644 --- a/packages/postagent-darwin-arm64/package.json +++ b/packages/postagent-darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "postagent-darwin-arm64", - "version": "0.3.2", + "version": "0.3.3", "description": "Postagent CLI native binary for macOS ARM64", "os": [ "darwin" diff --git a/packages/postagent-darwin-x64/CHANGELOG.md b/packages/postagent-darwin-x64/CHANGELOG.md index f7a786e..98011b1 100644 --- a/packages/postagent-darwin-x64/CHANGELOG.md +++ b/packages/postagent-darwin-x64/CHANGELOG.md @@ -1,5 +1,13 @@ # postagent-darwin-x64 +## 0.3.3 + +### Patch Changes + +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. + + Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. + ## 0.3.2 ### Patch Changes diff --git a/packages/postagent-darwin-x64/package.json b/packages/postagent-darwin-x64/package.json index 5676b24..d19294b 100644 --- a/packages/postagent-darwin-x64/package.json +++ b/packages/postagent-darwin-x64/package.json @@ -1,6 +1,6 @@ { "name": "postagent-darwin-x64", - "version": "0.3.2", + "version": "0.3.3", "description": "Postagent CLI native binary for macOS x64", "os": [ "darwin" diff --git a/packages/postagent-linux-arm64-gnu/CHANGELOG.md b/packages/postagent-linux-arm64-gnu/CHANGELOG.md index 30c676d..8ef392f 100644 --- a/packages/postagent-linux-arm64-gnu/CHANGELOG.md +++ b/packages/postagent-linux-arm64-gnu/CHANGELOG.md @@ -1,5 +1,13 @@ # postagent-linux-arm64-gnu +## 0.3.3 + +### Patch Changes + +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. + + Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. + ## 0.3.2 ### Patch Changes diff --git a/packages/postagent-linux-arm64-gnu/package.json b/packages/postagent-linux-arm64-gnu/package.json index 677c614..ca5b684 100644 --- a/packages/postagent-linux-arm64-gnu/package.json +++ b/packages/postagent-linux-arm64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "postagent-linux-arm64-gnu", - "version": "0.3.2", + "version": "0.3.3", "description": "Postagent CLI native binary for Linux ARM64 (glibc)", "os": [ "linux" diff --git a/packages/postagent-linux-x64-gnu/CHANGELOG.md b/packages/postagent-linux-x64-gnu/CHANGELOG.md index 9d89ffe..0c1961f 100644 --- a/packages/postagent-linux-x64-gnu/CHANGELOG.md +++ b/packages/postagent-linux-x64-gnu/CHANGELOG.md @@ -1,5 +1,13 @@ # postagent-linux-x64-gnu +## 0.3.3 + +### Patch Changes + +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. + + Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. + ## 0.3.2 ### Patch Changes diff --git a/packages/postagent-linux-x64-gnu/package.json b/packages/postagent-linux-x64-gnu/package.json index 95bc390..ca45313 100644 --- a/packages/postagent-linux-x64-gnu/package.json +++ b/packages/postagent-linux-x64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "postagent-linux-x64-gnu", - "version": "0.3.2", + "version": "0.3.3", "description": "Postagent CLI native binary for Linux x64 (glibc)", "os": [ "linux" diff --git a/packages/postagent/CHANGELOG.md b/packages/postagent/CHANGELOG.md index 8db4d41..c4b3038 100644 --- a/packages/postagent/CHANGELOG.md +++ b/packages/postagent/CHANGELOG.md @@ -1,5 +1,13 @@ # postagent +## 0.3.3 + +### Patch Changes + +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. + + Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. + ## 0.3.2 ### Patch Changes diff --git a/packages/postagent/package.json b/packages/postagent/package.json index a332bef..fee77d3 100644 --- a/packages/postagent/package.json +++ b/packages/postagent/package.json @@ -1,6 +1,6 @@ { "name": "postagent", - "version": "0.3.2", + "version": "0.3.3", "description": "CLI collection tool for agents", "type": "module", "bin": { From d67f5167b570787c027586c6251cdb01a0dd79b2 Mon Sep 17 00:00:00 2001 From: 4bmis Date: Sat, 25 Apr 2026 12:49:28 +0800 Subject: [PATCH 2/2] docs(changelog): simplify 0.3.3 entry Replace the verbose Dependabot/CVE detail with a single user-facing sentence about the bundled TLS dependencies. Co-Authored-By: Claude Opus 4.7 (1M context) --- packages/postagent-darwin-arm64/CHANGELOG.md | 4 +--- packages/postagent-darwin-x64/CHANGELOG.md | 4 +--- packages/postagent-linux-arm64-gnu/CHANGELOG.md | 4 +--- packages/postagent-linux-x64-gnu/CHANGELOG.md | 4 +--- packages/postagent/CHANGELOG.md | 4 +--- 5 files changed, 5 insertions(+), 15 deletions(-) diff --git a/packages/postagent-darwin-arm64/CHANGELOG.md b/packages/postagent-darwin-arm64/CHANGELOG.md index 7261bc1..40b4686 100644 --- a/packages/postagent-darwin-arm64/CHANGELOG.md +++ b/packages/postagent-darwin-arm64/CHANGELOG.md @@ -4,9 +4,7 @@ ### Patch Changes -- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. - - Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies. ## 0.3.2 diff --git a/packages/postagent-darwin-x64/CHANGELOG.md b/packages/postagent-darwin-x64/CHANGELOG.md index 98011b1..d4fce16 100644 --- a/packages/postagent-darwin-x64/CHANGELOG.md +++ b/packages/postagent-darwin-x64/CHANGELOG.md @@ -4,9 +4,7 @@ ### Patch Changes -- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. - - Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies. ## 0.3.2 diff --git a/packages/postagent-linux-arm64-gnu/CHANGELOG.md b/packages/postagent-linux-arm64-gnu/CHANGELOG.md index 8ef392f..e113586 100644 --- a/packages/postagent-linux-arm64-gnu/CHANGELOG.md +++ b/packages/postagent-linux-arm64-gnu/CHANGELOG.md @@ -4,9 +4,7 @@ ### Patch Changes -- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. - - Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies. ## 0.3.2 diff --git a/packages/postagent-linux-x64-gnu/CHANGELOG.md b/packages/postagent-linux-x64-gnu/CHANGELOG.md index 0c1961f..3c7846d 100644 --- a/packages/postagent-linux-x64-gnu/CHANGELOG.md +++ b/packages/postagent-linux-x64-gnu/CHANGELOG.md @@ -4,9 +4,7 @@ ### Patch Changes -- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. - - Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies. ## 0.3.2 diff --git a/packages/postagent/CHANGELOG.md b/packages/postagent/CHANGELOG.md index c4b3038..ba4a31a 100644 --- a/packages/postagent/CHANGELOG.md +++ b/packages/postagent/CHANGELOG.md @@ -4,9 +4,7 @@ ### Patch Changes -- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13. - - Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change. +- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies. ## 0.3.2