pulse-triage[bot] f0d27be7ba Coordinate mapped IPv4 guest reads without sharing TLS pins ...

IPv4-mapped IPv6 and literal IPv4 reach the same numeric guest channel. Share only per-VM admission so another spelling cannot bypass an in-flight or uncertain command. Preserve the previous certificate origin identity, URL, proxy and first-use trust behaviour.

Change-source: pulse-maintainer

2026-10-11 12:09:32 +01:00

..

agents

Preserve partial PVE filesystem readings without widening helper access

2026-10-05 18:22:01 +01:00

aicontracts

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

audit

Preserve audit evidence in verification and recovery guidance

2026-10-01 20:08:53 +01:00

auth

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

cloudauth

fix(hosted): preserve direct handoff membership continuity

2026-03-26 23:40:02 +00:00

db

fix(ai): preserve diagnostic evidence and proposal boundaries

2026-09-06 01:54:28 +01:00

discovery

Bound discovery probe response bodies

2026-09-01 10:37:26 +01:00

diskinventory

Stop a stale agent SMART row lending a replaced disk its identity (#2658)

2026-10-07 14:01:19 +01:00

edition

Block in-app self-update on the Pro binary to prevent silent downgrade

2026-07-08 10:02:04 +01:00

extensions

Fix audit storage migration and viewer races

2026-07-24 10:33:57 +01:00

fsfilters

Avoid per-directory allocations while filtering disk mounts

2026-10-09 17:50:19 +01:00

licensing

Retire Relay labels and upsells inside Pulse

2026-09-29 13:19:54 +01:00

metrics

Remove the summary chart routes no client calls

2026-10-07 23:14:49 +01:00

netutil

Keep guest primary addresses associated with their interfaces

2026-10-09 13:07:08 +01:00

pbs

Expose infrastructure credentials following redirects to another origin

2026-10-11 06:34:28 +01:00

pmg

Honour saved PMG collection scope without inventing recovery

2026-10-08 06:54:46 +01:00

proxmox

Coordinate mapped IPv4 guest reads without sharing TLS pins

2026-10-11 12:09:32 +01:00

pulsecli

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

reporting

Let only POST narrate single-resource reports with Pulse Assistant

2026-10-07 21:00:34 +01:00

securityutil

Block IPv6 transition addresses in SSRF guards (GHSA-8f8r-p75h-jwq5)

2026-07-31 17:57:26 +01:00

server

Preserve telemetry sender transitions and bound-socket health

2026-10-01 13:28:21 +01:00

tlsutil

Keep infrastructure credentials inside their configured HTTP origin

2026-10-11 06:37:38 +01:00