Skip to content

chore(release): v0.91.0 - #486

Merged
ralyodio merged 1 commit into
mainfrom
release-v0.91.0
Sep 3, 2026
Merged

chore(release): v0.91.0#486
ralyodio merged 1 commit into
mainfrom
release-v0.91.0

Conversation

@ralyodio

@ralyodio ralyodio commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

moshcode ssh — persistent SSH workspaces (#485, PRD 0013): named targets, one OpenSSH ControlMaster per target, exec as a no-PTY command channel whose --json separates the command's verdict from the transport's, interactive attach, scp put/get, a remote tmux shell, and sshOpen() / sshExec() / sshClose() in moshscript.

🤖 Generated with Claude Code

https://claude.ai/code/session_01RcmWsBrbzQpfTTz71wfbkw

`moshcode ssh` — persistent SSH workspaces (#485, PRD 0013): named targets,
one OpenSSH ControlMaster per target, `exec` as a no-PTY command channel with
a --json verdict that separates the command's exit from the transport's,
interactive attach, scp put/get, a remote tmux shell, and moshscript helpers.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RcmWsBrbzQpfTTz71wfbkw
@ralyodio
ralyodio merged commit 373cbb5 into main Sep 3, 2026
6 checks passed
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

0 finding(s) in the 1 file(s) this pull request changes.

Nothing in the files this pull request changes.

91 pre-existing finding(s) elsewhere in the repository — **HIGH/CRITICAL**: 8 | **MEDIUM**: 73 | **LOW**: 10

Not introduced by this pull request. The full set is in the Security tab.

Severity Rule Location
HIGH js-ssrf-outbound-request apps/pwa/public/sw.js:45
HIGH tls-verification-disabled apps/pwa/src/lib/moshpit-gateway.mjs:299
HIGH sh-remote-script-execution install.sh:86
HIGH sh-remote-script-execution install.sh:90
HIGH sh-remote-script-execution install.sh:202
HIGH sh-remote-script-execution install.sh:213
HIGH sh-remote-script-execution install.sh:219
HIGH tls-verification-disabled src/dns.mjs:766
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:139
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:153
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:179
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:373
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:377
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:422
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:671
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:867
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:869
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:928
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:974
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:1044

…and 71 more. Full results in the Security tab.

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio deleted the release-v0.91.0 branch September 3, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant