v4.7.3
Patch Changes
- 341b60e: Reject empty
signingSecretat initialization to prevent accidental HMAC signature forgery.
Fetched May 28, 2026
signingSecret at initialization to prevent accidental HMAC signature forgery.Fetched May 28, 2026
Patch Changes - 4545150: Require exact value to bypass signature verification, preventing truthy but incorrect values from skipping authent…
Slack · Bolt JSPatch Changes - a18c359: fix: correct InvalidCustomPropertyError code and MemoryStore promise handling
Slack · Bolt JSA security vulnerability that incorrectly included authorization headers in API requests to TUF repository mirrors via gh attestation, gh r…
GitHub · GitHub CLIPatch Changes - 1492 Thanks @amh4r! - Reduce response info when unauthorized - [1490](https://github.com/inng
Inngest · JS SDK