• v2.5.2-hotfix ca24625a2c

    FTMahringer released this 2026-05-13 00:01:39 +02:00 | 94 commits to main since this release

    v2.5.2-hotfix

    Hotfix for v2.5.2-dev addressing CI failures and security alerts.

    Fixes

    • Docker build: Added synapse-plugin-api dependency, updated Dockerfile and docker-compose.yml build context
    • CodeQL path-injection (2x): Added validateJarName() validation in PluginStorageService
    • Startup failure: SystemLogService now catches DataAccessException and falls back to stderr when system_logs table doesn't exist yet
    • Plugin loader compilation: Fixed logService parameter order, fixed InboundMessage accessor methods

    Workflow Status

    • Compose Smoke Test
    • CodeQL
    • Migration Validation
    Downloads