Aquesta és una versió anterior. La versió actual és la 0.57.0. thv 0.57.0 · Data de publicació:
Fitxers d’instal·lació 0.43.0
| Arquitectura | Tipus | Àmbit | Mida del fitxer | Baixa | SHA256 |
|---|---|---|---|---|---|
| 64 bits | ZIP → Portable · en-US | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable · en-US | — | — | github.com | VirusTotal |
L’enllaç i l’SHA256 provenen del manifest comunitari del Gestor de paquets del Windows. Convé comparar el hash del fitxer baixat abans d’executar-lo.
Notes de la versió
## Changelog
* 41ca9c2dae48cbff931e9943505fbbd4426ac534: Add PluginLockService and managed install flag (#6311) (@samuv)
* 03022064fdcf1f472dbb85a9ded83b6333831e44: Add plugins key to lock file schema (#6303) (@samuv)
* 991fdce08b69c7628f8e584fbdb53a96c849b839: Add zizmor to CI and stop double-running the security scan (#6251) (@ChrisJBurns)
* f8b14e3e6a113da0c5752bb04220bc6acea416ac: Bind the GHCR credentials and chart version in helm-publish (#6270) (@ChrisJBurns)
* 4d77048434ea930e4d90afe7bdd2922fe5c2f812: Bind workflow expressions and drop persisted credentials (#6258) (@ChrisJBurns)
* 3c4dec3c104640be4e5ad623c11b915b8e4e51d1: Bound client-controlled metric label length (#6279) (@Nashon-Steffen)
* d0579299936a6ae16afa9a0f5d456928d54f9c6f: Bump go.mod to get CVE fixes (#6327) (@jhrozek)
* ebb25c203d786fdd2714e42f94faaa33d4e0e7ad: Clear the last zizmor findings in the release workflows (#6281) (@ChrisJBurns)
* 3993308af4e0b3f7d35328acee3da713fe682b97: Clear the remaining zizmor findings in helm-publish (#6275) (@ChrisJBurns)
* db86c06b34e5d60a11561272f367535dd80f05fa: Deflake the initialize dial-error proxy test (#6264) (@amirejaz)
* d1631159e8a9152e7425933f0a0c45095c927f25: Derive PR number from the triggering run in the size labeler (#6259) (@ChrisJBurns)
* 52ad2932e0b41f2ad7cb37ac50abddd3556252c7: Display recorded trust state to the user (#6137) (@samuv)
* 1c030a766a3c92467b596e39cb97c1c2f39d4653: Drop build fingerprint from proxy /health response (#6280) (@Nashon-Steffen)
* cfba58008802f705a199325d92c9488ff3ce4a81: Enforce recorded ref and runner on skill verification (#6315) (@samuv)
* 63f32f3e5dea1bd62b29162d33000f6a0da6e661: Extend private-IP guard to 6to4/Teredo addresses (#6249) (@ChrisJBurns)
* aa1628ee460ca9857c4f3df77ef1549c0322fc6f: Gate the Claude workflow on write access, not contribution history (#6260) (@ChrisJBurns)
* ba90178dc1b1f52dd5908b6b3aacf0c8434bd105: Guard against shell injection via github.ref in image workflow (#6248) (@ChrisJBurns)
* 247a502f9e00cf275bee7aff2f6265496b5b13a1: Ignore unsupported grant types in CIMD documents (#6297) (@amirejaz)
* fc1597f7c21b4427cb497d4d0acfa0d1b72122d6: Let an explicit non-Modern header outrank a reserved key (#6231) (@amirejaz)
* 17e94b386b7a2ec823b78a7d03ae8f5b0da203ef: Make RFC 8693 delegate clients reachable and usable (#6320) (@jhrozek)
* ef5bb19e696f62153661d63051ffd6cfa92b280a: Make the zizmor check blocking (#6274) (@ChrisJBurns)
* e7dd5fa71ffe5fd88685fa2c4e21bca314c5f83d: Parse multi-line Modern SSE events (#6126) (@kocaemre)
* 659967a0e5fb90e837bb59ea6375ff0bb22ff2d3: Pass only the secret the test workflow needs (#6269) (@ChrisJBurns)
* daef21a16303fa5099ed12797f91346c2a12915a: Pin CodeQL SARIF action comment to v4.37.6 (#6313) (@samuv)
* caa351d740f5a4b4d7fe90f1c6beafc1abc316f0: Pin actions to commit SHAs and fix stale version comments (#6254) (@ChrisJBurns)
* 5c3bafb2ced2ac2ef7487d9305a65857066666b1: Rate limiting observability (metrics and tracing) PR B (#5800) (@Sanskarzz)
* 17f07080eff11d5d7b5cc825bd9a21924fe34dc0: Record certificate ref and runner in lock provenance (#6312) (@samuv)
* 8f294e26a9eecfc439c09e3e1d58a241064054f6: Release v0.43.0 (#6333) (@toolhive-release-app[bot])
* 374c30688e5b5a41fe5f38337123f2308c8d70b6: Reset the LLM config when the last tool is torn down (#6295) (@jerm-dro)
* 094a621ee0b789581869af66e9abd1f2a8fdea93: Scope releaser permissions and bind the tag expression (#6263) (@ChrisJBurns)
* ba2cbcb96b00307e5708d279c6ae9380dc628d7e: Scope the release app token to what releaseo needs (#6266) (@ChrisJBurns)
* 06483ba38d8972fc462ff7f97fcd77914567a908: Scope the remaining release app tokens and bind a trailer (#6272) (@ChrisJBurns)
* 78541159f68fe251b0e1dbda7b5222658654738c: Sign pushes by default and remove the lock feature gate (#6139) (@samuv)
* 7164e36933412b5473b78a0fa552b672eb54dcf2: Sign the macOS thv binary with a Developer ID certificate (#6156) (@eleftherias)
* b20cb9fde3684975c16d8933a726f0879e96c7fa: Stop persisting git credentials in CI workflow checkouts (#6255) (@ChrisJBurns)
* 0ff80151b01adb34ce0a9b71efda09f54e5fba7e: Stop writing the PR number into the size label artifact (#6261) (@ChrisJBurns)
* 026422e6d66f901fac85f9f9a51ee677541b5487: Support confidential clients in dynamic client registration (#6252) (@jhrozek)
* f66d0f53d653e5d061b69694af5f1434062326a6: Suppress four zizmor findings that cannot be fixed (#6262) (@ChrisJBurns)
* ee05c517bb083c048a8c897cdc2c0530d633e088: Update module github.com/stacklok/toolhive-catalog to v0.20260810.0 (#6257) (@renovate[bot])
* c503322022aa55ae17abe12f4b03fbd6cb6f14d5: Use a bare thv command as the LLM token helper (#6326) (@jerm-dro)
* c86cb8a1db1597824cf6fd983dd099d5f1bd9fac: fix(auth): bind OAuth callback listener to loopback only (#6238) (@SashaMIT)
* bacac58acaea5c5ff9cf60cfa5d41a72d0aa1374: fix(authz): make Cedar URI entity IDs collision-free (#6239) (@SashaMIT)
* 6f04df42579e32c4633f62fb22e6139430ec83a7: fix(vmcp): reject Authorization and Cookie in passthroughHeaders, as documented (#6235) (@SashaMIT)
