Skip to content

Commit 16e9dfd

Browse files
chore: release versions
1 parent 6f92e5b commit 16e9dfd

11 files changed

Lines changed: 40 additions & 53 deletions

.changeset/fix-security-toctou.md

Lines changed: 0 additions & 11 deletions
This file was deleted.

.changeset/issue-461-calendar-meet.md

Lines changed: 0 additions & 5 deletions
This file was deleted.

.changeset/security-hardening-rollup.md

Lines changed: 0 additions & 5 deletions
This file was deleted.

.changeset/stderr-output-hygiene.md

Lines changed: 0 additions & 10 deletions
This file was deleted.

.changeset/sync-skills.md

Lines changed: 0 additions & 5 deletions
This file was deleted.

.changeset/validate-unicode-security.md

Lines changed: 0 additions & 5 deletions
This file was deleted.

CHANGELOG.md

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,33 @@
11
# @googleworkspace/cli
22

3+
## 0.17.0
4+
5+
### Minor Changes
6+
7+
- 1b0a21f: feat: support google meet video conferencing in calendar +insert
8+
9+
### Patch Changes
10+
11+
- 811fe7b: Fix critical security vulnerability (TOCTOU/Symlink race) in atomic file writes.
12+
13+
The atomic_write and atomic_write_async utilities now use:
14+
15+
- Randomized temporary filenames to prevent predictability.
16+
- O_EXCL creation flags to prevent following pre-existing symlinks.
17+
- Strict 0600 permissions from the moment of file creation on Unix systems.
18+
- Redundant post-write permission calls have been removed to close race windows.
19+
20+
- b241a5b: fix(security): cap Retry-After sleep, sanitize upload mimeType, and validate --upload/--output paths
21+
- 6f92e5b: Stderr/output hygiene rollup: route diagnostics to stderr, add colored error labels, propagate auth errors.
22+
23+
- **triage.rs**: "No messages found" sent to stderr so stdout stays valid JSON for pipes
24+
- **modelarmor.rs**: response body printed only on success; error message now includes body for diagnostics
25+
- **error.rs**: colored `error[variant]:` labels on stderr (respects `NO_COLOR` env var), `hint:` prefix for accessNotConfigured guidance
26+
- **calendar, chat, docs, drive, script, sheets**: auth failures now propagate as `GwsError::Auth` instead of silently proceeding unauthenticated (dry-run still works without auth)
27+
28+
- 398e80c: Sync generated skills with latest Google Discovery API specs
29+
- 8458104: Extend input validation to reject dangerous Unicode characters (zero-width chars, bidi overrides, Unicode line/paragraph separators) that were not caught by the previous ASCII-range check
30+
331
## 0.16.0
432

533
### Minor Changes

Cargo.lock

Lines changed: 7 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Cargo.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414

1515
[package]
1616
name = "gws"
17-
version = "0.16.0"
17+
version = "0.17.0"
1818
edition = "2021"
1919
description = "Google Workspace CLI — dynamic command surface from Discovery Service"
2020
license = "Apache-2.0"

flake.lock

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)