-
Onebox v32.5.1
StableRelease / build-and-release (push) Successful in 19m14sreleased this
2026-09-23 19:56:16 +00:00 | 166 commits to main since this release2026-09-23 - 32.5.1
Fixes
- Keep platform database passwords out of command arguments and out of the command output Onebox surfaces. The MariaDB and Valkey health checks, the MariaDB, ClickHouse and Valkey provisioning and deprovisioning, and the backup dump and restore steps for those three services hand the password to the client through the exec environment as
MYSQL_PWD,CLICKHOUSE_PASSWORDorVALKEYCLI_AUTHinstead of as-p,--passwordor-a, which Docker's exec inspect and event records show. Every log line, thrown error and restore warning that quotes such a command's output, and the failure the Docker manager'sexecInContainerlogs and returns, first passes through one shared redaction helper with the passwords the command was handed, so a MariaDB client that echoes a failedCREATE USER … IDENTIFIED BYstatement or a Docker exec error that quotes the exec's arguments shows[redacted]in place of each password and keeps the rest of its text. The new user's password in the MariaDB and ClickHouseCREATE USERstatement is still a command argument, because the Docker client's exec cannot write to the command's stdin.
Maintenance
- Declare
@push.rocks/smartserve6.2.4 as a direct dependency.@api.global/typedsocketand@serve.zone/apitake it as a peer, which the Node development tree had resolved to 6.3.1, the version tstest 6.2.0 brings in, while@api.global/typedserverand the binary's Deno lock kept 6.2.4. Onebox's Node tree anddeno.locknow both resolve 6.2.4, so the tests run the smartserve the binary ships; tstest keeps its own 6.3.1.
Downloads
- Keep platform database passwords out of command arguments and out of the command output Onebox surfaces. The MariaDB and Valkey health checks, the MariaDB, ClickHouse and Valkey provisioning and deprovisioning, and the backup dump and restore steps for those three services hand the password to the client through the exec environment as