Skip to content

chore(release): v0.74.0 - #450

Merged
ralyodio merged 1 commit into
mainfrom
chore-release-0.74.0
Aug 29, 2026
Merged

chore(release): v0.74.0#450
ralyodio merged 1 commit into
mainfrom
chore-release-0.74.0

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Version bump only. Three commits have been sitting on main since v0.73.0 was tagged, and none of them reaches an installed CLI until a release is cut — install.sh and moshcode upgrade both fetch the latest GitHub release, not main.

Minor rather than patch: #448 and #449 both add surface.

This PR does not publish anything. Merging it bumps package.json; the GitHub release still has to be created by hand at the merge commit, and that is what fires publish.yml and pushes to npm. I'll cut it as soon as this lands.

Worth noting for #448 specifically: moshcode install yt-dlp does not work for anyone today. v0.73.0 was tagged before it merged, so the released tree has no such entry.

@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

0 finding(s) in the 1 file(s) this pull request changes.

Nothing in the files this pull request changes.

82 pre-existing finding(s) elsewhere in the repository — **HIGH/CRITICAL**: 5 | **MEDIUM**: 67 | **LOW**: 10

Not introduced by this pull request. The full set is in the Security tab.

Severity Rule Location
HIGH js-ssrf-outbound-request apps/pwa/public/sw.js:45
HIGH tls-verification-disabled apps/pwa/src/lib/moshpit-gateway.mjs:299
HIGH sh-remote-script-execution install.sh:79
HIGH sh-remote-script-execution install.sh:83
HIGH tls-verification-disabled src/dns.mjs:766
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:138
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:152
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:178
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:365
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:369
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:414
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:663
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:859
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:861
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:920
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:966
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:1036
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:1139
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:1162
MEDIUM sql-template-interpolation apps/pwa/src/moshpit.mjs:1184

…and 62 more. Full results in the Security tab.

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 296add3 into main Aug 29, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant