Backport the security fixes to v0.4 for a 0.4.25 release#707

Open

hsbt wants to merge 20 commits into

v0.4-stablefrom

backport/v0.4/security-patches

Commits on Jun 15, 2026

🍒 pick e224fd67: 🥅 Validate that Atom and Flag are not empty

nevans
authored and
hsbt
committed
🍒 pick 5c213ab7 (#675): 🏷️ Allow 64-bit Integer arguments

nevans
authored and
hsbt
committed
🍒 pick 3fe06a4c (#676): 🥅 Ensure send_number_data input is an Integer

nevans
authored and
hsbt
committed
🍒 pick 0d508fa7 (#681): 🥅 Validate server's literal byte size format

nevans
authored and
hsbt
committed
🍒 pick b02182ce (#678): ✅🐛 Fix FakeServer CommandParseError (tests only)

nevans
authored and
hsbt
committed
🍒 pick ef6fde3b (#678): ✅ Handle "stream closed" as EOF (tests only)

nevans
authored and
hsbt
committed
🍒 pick a27a0022 (#678): ✅ Allow test server td ignore abrupt EOF

nevans
authored and
hsbt
committed
🍒 pick 95afda8f (#679): ♻️ Allow RawData.new to directly set parts array

nevans
authored and
hsbt
committed
🍒 pick 257e51d0 (#679): ♻️ Extract RawData.split(string)

nevans
authored and
hsbt
committed
🍒 pick aab64f92 (#686): 🧵 Fix deadlock in `#disconnect`

nevans
authored and
hsbt
committed
🍒 pick e3c50fad (#698): ♻️ Refactor RawText, add improve test coverage

nevans
authored and
hsbt
committed
🍒 pick 8d9397ab (#698): 🥅 Validate QuotedString contains only valid bytes

nevans
authored and
hsbt
committed
🍒 pick 1f97168b (#699): 🥅 Validate `#enable` arguments are all atoms

nevans
authored and
hsbt
committed
🍒 pick d6ddd294 (#700): 🐛 Prevent trailing `{0}` in RawData validation

nevans
authored and
hsbt
committed
🍒 pick 62a0da6d (#701): 🥅 Validate non-synchronizing literals support

nevans
authored and
hsbt
committed
🍒 pick ae9f83b5 (#701): ♻️ Extract str.bytesize lvar in send_literal

nevans
authored and
hsbt
committed
🍒 pick 0ea9eba3 (#701): ✅ Fix flaky tests for MacOS, TruffleRuby

nevans
authored and
hsbt
committed
✅ Avoid endless method defs for Ruby 2.7 compatibility
hsbt
committed
🧵 Synchronize FakeServer::Connection#close to avoid double logout
hsbt
committed
🔖 Bump version to 0.4.25
hsbt
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Backport the security fixes to v0.4 for a 0.4.25 release#707

Backport the security fixes to v0.4 for a 0.4.25 release#707
hsbt wants to merge 20 commits into
v0.4-stablefrom
backport/v0.4/security-patches

Commits on Jun 15, 2026

🍒 pick e224fd67: 🥅 Validate that Atom and Flag are not empty

🍒 pick 5c213ab7 (#675): 🏷️ Allow 64-bit Integer arguments

🍒 pick 3fe06a4c (#676): 🥅 Ensure send_number_data input is an Integer

🍒 pick 0d508fa7 (#681): 🥅 Validate server's literal byte size format

🍒 pick b02182ce (#678): ✅🐛 Fix FakeServer CommandParseError (tests only)

🍒 pick ef6fde3b (#678): ✅ Handle "stream closed" as EOF (tests only)

🍒 pick a27a0022 (#678): ✅ Allow test server td ignore abrupt EOF

🍒 pick 95afda8f (#679): ♻️ Allow RawData.new to directly set parts array

🍒 pick 257e51d0 (#679): ♻️ Extract RawData.split(string)

🍒 pick aab64f92 (#686): 🧵 Fix deadlock in `#disconnect`

🍒 pick e3c50fad (#698): ♻️ Refactor RawText, add improve test coverage

🍒 pick 8d9397ab (#698): 🥅 Validate QuotedString contains only valid bytes

🍒 pick 1f97168b (#699): 🥅 Validate `#enable` arguments are all atoms

🍒 pick d6ddd294 (#700): 🐛 Prevent trailing `{0}` in RawData validation

🍒 pick 62a0da6d (#701): 🥅 Validate non-synchronizing literals support

🍒 pick ae9f83b5 (#701): ♻️ Extract str.bytesize lvar in send_literal

🍒 pick 0ea9eba3 (#701): ✅ Fix flaky tests for MacOS, TruffleRuby

✅ Avoid endless method defs for Ruby 2.7 compatibility

🧵 Synchronize FakeServer::Connection#close to avoid double logout

🔖 Bump version to 0.4.25