• v2.5.4-dev 33803f05e8

    FTMahringer released this 2026-05-12 18:50:09 +02:00 | 90 commits to main since this release

    v2.5.4-dev

    Plugin Ecosystem — Sandboxing & Security

    Added

    • BytecodeScanner: ASM-based forbidden reference detection in plugin JARs
    • PluginSandboxService: JPMS isolation validation, lifecycle hook timeouts, resource limits per trust tier
    • PluginSandboxController: /sandbox/scan and /{id}/sandbox/limits endpoints
    • PluginLoaderService: integrated JPMS check and timeout-guarded onLoad/onUnload
    • Plugin entity: scanClean, sandboxEnabled, lifecycleTimeoutMs, messageTimeoutMs, maxLogsPerMinute
    • ASM 9.7.1 dependency
    • Migration V20: plugin sandbox columns

    Workflow Status

    • Pending: Compose Smoke Test, Migration Validation, CodeQL
    Downloads