Skip to content

Latest commit

 

History

History
18 lines (14 loc) · 3.53 KB

7.0.8.md

File metadata and controls

18 lines (14 loc) · 3.53 KB

This is a security release. See the documentation for more information on the upgrade procedure.

  • Security bug fixes The scope of application tokens was not verified when writing containers or Conan packages. This is of no consequence when the user associated with the application token does not have write access to packages. If the user has write access to packages, such a token can be used to write containers and Conan packages. An application token that was used to write containers or Conan packages without the package:write scope will now fail with an unauthorized error. It must be re-created to include the package:write scope.
  • User Interface bug fixes
  • Bug fixes
    • PR (backported): The scope of application tokens is not verified when writing containers or Conan packages.
    • PR (backported): Run full PR checks on AGit push.
    • PR (backported): - commit When a repository is adopted, its object format is not set in the database.
    • PR (backported): - commit During a migration from bitbucket, LFS downloads fail.
  • Localization