mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
Release version 16.2.3
This commit is contained in:
5 files changed
+133
-3
No files matched your search
@@ -1,5 +1,48 @@
|
||||
# Changelog
|
||||
|
||||
## [16.2.3] - 2026-10-21
|
||||
|
||||
Added:
|
||||
|
||||
- PHP: 20 apps load a shared hardening ini against CVE-2026-109618/109619
|
||||
- PHP: Moodle, Nextcloud and Shopware FPM workers restart every 200 requests
|
||||
- Agents: *i8-release-article* drafts release articles, banners and posts
|
||||
|
||||
Changed:
|
||||
|
||||
- PHP: *expose_php* and *session.upload_progress* are off in all hardened apps
|
||||
- PHP: *memory_limit* is unlimited for now; Joomla and Magento keep theirs
|
||||
- Proxy: no openresty version and no *X-Powered-By*; HSTS lasts one year
|
||||
|
||||
Fixed:
|
||||
|
||||
- Install: an end-of-life distro Node.js is replaced by the current LTS
|
||||
- Install: the upstream Node.js install stops on non-Linux hosts
|
||||
- Moodle: ES module URLs ending in *.js* reach Moodle instead of a 404
|
||||
- BigBlueButton: the welcome help link points at the documentation
|
||||
- Tests: the Bluesky public API CSP origin is no longer probed as a page
|
||||
- CI: swarm diagnostics collect package manager logs first, on every node
|
||||
|
||||
Version jumps (net since 16.2.2):
|
||||
|
||||
- *web-app-erpnext*: v16.51.2 to v16.52.0
|
||||
- *web-app-gitlab*: v19.5.0 to v19.5.1
|
||||
- *web-app-n8n*: 2.45.0 to 2.45.1
|
||||
- *web-app-pixelfed*: 20261020 to 20261021
|
||||
- *web-app-prometheus*: v3.15.0 to v3.15.1
|
||||
|
||||
Upgrade notes:
|
||||
|
||||
- PHP: the first deploy recreates every PHP container once for the new mount
|
||||
- PHP: pull patched images (PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12) and redeploy
|
||||
- PHP: drop *memory_limit = -1* from *hardening.ini* after patched images
|
||||
- Friendica: account imports are capped at 64 MiB while the limit is unlimited
|
||||
- Akaunting (PHP 8.1) and FusionDirectory (PHP 7.4) stay unpatched; see TODOs
|
||||
|
||||
Contributors:
|
||||
|
||||
- [Kevin Veen-Birkenbach](https://veen.world): PHP hardening, Node.js, Moodle
|
||||
|
||||
## [16.2.2] - 2026-10-21
|
||||
|
||||
Fixed:
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# Maintainer: Kevin Veen-Birkenbach <info@veen.world>
|
||||
|
||||
pkgname=infinito-nexus
|
||||
pkgver=16.2.2
|
||||
pkgver=16.2.3
|
||||
pkgrel=1
|
||||
pkgdesc="Meta package for Infinito.Nexus host dependencies (dev + CI)."
|
||||
arch=('any')
|
||||
|
||||
@@ -1,3 +1,48 @@
|
||||
infinito-nexus (16.2.3-1) unstable; urgency=medium
|
||||
|
||||
Added:
|
||||
|
||||
- PHP: 20 apps load a shared hardening ini against CVE-2026-109618/109619
|
||||
- PHP: Moodle, Nextcloud and Shopware FPM workers restart every 200 requests
|
||||
- Agents: *i8-release-article* drafts release articles, banners and posts
|
||||
|
||||
Changed:
|
||||
|
||||
- PHP: *expose_php* and *session.upload_progress* are off in all hardened apps
|
||||
- PHP: *memory_limit* is unlimited for now; Joomla and Magento keep theirs
|
||||
- Proxy: no openresty version and no *X-Powered-By*; HSTS lasts one year
|
||||
|
||||
Fixed:
|
||||
|
||||
- Install: an end-of-life distro Node.js is replaced by the current LTS
|
||||
- Install: the upstream Node.js install stops on non-Linux hosts
|
||||
- Moodle: ES module URLs ending in *.js* reach Moodle instead of a 404
|
||||
- BigBlueButton: the welcome help link points at the documentation
|
||||
- Tests: the Bluesky public API CSP origin is no longer probed as a page
|
||||
- CI: swarm diagnostics collect package manager logs first, on every node
|
||||
|
||||
Version jumps (net since 16.2.2):
|
||||
|
||||
- *web-app-erpnext*: v16.51.2 to v16.52.0
|
||||
- *web-app-gitlab*: v19.5.0 to v19.5.1
|
||||
- *web-app-n8n*: 2.45.0 to 2.45.1
|
||||
- *web-app-pixelfed*: 20261020 to 20261021
|
||||
- *web-app-prometheus*: v3.15.0 to v3.15.1
|
||||
|
||||
Upgrade notes:
|
||||
|
||||
- PHP: the first deploy recreates every PHP container once for the new mount
|
||||
- PHP: pull patched images (PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12) and redeploy
|
||||
- PHP: drop *memory_limit = -1* from *hardening.ini* after patched images
|
||||
- Friendica: account imports are capped at 64 MiB while the limit is unlimited
|
||||
- Akaunting (PHP 8.1) and FusionDirectory (PHP 7.4) stay unpatched; see TODOs
|
||||
|
||||
Contributors:
|
||||
|
||||
- [Kevin Veen-Birkenbach](https://veen.world): PHP hardening, Node.js, Moodle
|
||||
|
||||
-- Kevin Veen-Birkenbach <kevin@veen.world> Wed, 21 Oct 2026 22:02:43 +0200
|
||||
|
||||
infinito-nexus (16.2.2-1) unstable; urgency=medium
|
||||
|
||||
Fixed:
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
Name: infinito-nexus
|
||||
Version: 16.2.2
|
||||
Version: 16.2.3
|
||||
Release: 1%{?dist}
|
||||
Summary: Meta package for Infinito.Nexus host dependencies
|
||||
|
||||
@@ -58,6 +58,48 @@ install -d %{buildroot}%{_docdir}/%{name}
|
||||
%doc %{_docdir}/%{name}/DEPENDENCIES
|
||||
|
||||
%changelog
|
||||
* Wed Oct 21 2026 Kevin Veen-Birkenbach <kevin@veen.world> - 16.2.3-1
|
||||
- Added:
|
||||
|
||||
- - PHP: 20 apps load a shared hardening ini against CVE-2026-109618/109619
|
||||
- - PHP: Moodle, Nextcloud and Shopware FPM workers restart every 200 requests
|
||||
- - Agents: *i8-release-article* drafts release articles, banners and posts
|
||||
|
||||
- Changed:
|
||||
|
||||
- - PHP: *expose_php* and *session.upload_progress* are off in all hardened apps
|
||||
- - PHP: *memory_limit* is unlimited for now; Joomla and Magento keep theirs
|
||||
- - Proxy: no openresty version and no *X-Powered-By*; HSTS lasts one year
|
||||
|
||||
- Fixed:
|
||||
|
||||
- - Install: an end-of-life distro Node.js is replaced by the current LTS
|
||||
- - Install: the upstream Node.js install stops on non-Linux hosts
|
||||
- - Moodle: ES module URLs ending in *.js* reach Moodle instead of a 404
|
||||
- - BigBlueButton: the welcome help link points at the documentation
|
||||
- - Tests: the Bluesky public API CSP origin is no longer probed as a page
|
||||
- - CI: swarm diagnostics collect package manager logs first, on every node
|
||||
|
||||
- Version jumps (net since 16.2.2):
|
||||
|
||||
- - *web-app-erpnext*: v16.51.2 to v16.52.0
|
||||
- - *web-app-gitlab*: v19.5.0 to v19.5.1
|
||||
- - *web-app-n8n*: 2.45.0 to 2.45.1
|
||||
- - *web-app-pixelfed*: 20261020 to 20261021
|
||||
- - *web-app-prometheus*: v3.15.0 to v3.15.1
|
||||
|
||||
- Upgrade notes:
|
||||
|
||||
- - PHP: the first deploy recreates every PHP container once for the new mount
|
||||
- - PHP: pull patched images (PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12) and redeploy
|
||||
- - PHP: drop *memory_limit = -1* from *hardening.ini* after patched images
|
||||
- - Friendica: account imports are capped at 64 MiB while the limit is unlimited
|
||||
- - Akaunting (PHP 8.1) and FusionDirectory (PHP 7.4) stay unpatched; see TODOs
|
||||
|
||||
- Contributors:
|
||||
|
||||
- - [Kevin Veen-Birkenbach](https://veen.world): PHP hardening, Node.js, Moodle
|
||||
|
||||
* Wed Oct 21 2026 Kevin Veen-Birkenbach <kevin@veen.world> - 16.2.2-1
|
||||
- Fixed:
|
||||
|
||||
|
||||
+1
-1
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
|
||||
|
||||
[project]
|
||||
name = "infinito-nexus"
|
||||
version = "16.2.2"
|
||||
version = "16.2.3"
|
||||
description = "Infinito.Nexus"
|
||||
readme = "README.md"
|
||||
requires-python = ">=3.11"
|
||||
|
||||
Reference in new issue
Block a user