Starstruk Logo MarkStarstruk

v0.3.22 v28.0.0

high risk

tobychui/zoraxySep 29, 2026 → Sep 29, 20260 days between releases

What's New

Major version jump introduces Git proxying, audit logging, and deploy tokens

Breaking Changes

  • Route Git network operations through an internal proxy
  • Update egress settings
  • Add RUN_RETENTION_DAYS to delete old action runs

New Features

  • Audit logging
  • Deploy tokens
  • Project APIs
  • Admin impersonation
  • Dynamic matrix evaluation in Actions

Improvements

  • Enforce repository-scoped authorization for team access
  • Identify presented public keys by fingerprint
  • Update golang.org/x/crypto SSH to address denial of service

Bug Fixes

  • Reject invalid and duplicate Git objects on push
  • Keep cancelled and unapproved fork PR runs behind approval gate
  • Fix SSH denial of service vulnerability

Upgrade Notes

You must update network configuration to route Git operations through the internal proxy. UI notifications now use WebSockets instead of SSE. Configure the new RUN_RETENTION_DAYS environment variable to manage action run cleanup.

The Two Releases

v0.3.22

v0.3.22

Sep 29, 2026· 23 days ago

This version introduces significant TypeScript SDK features, including per-checkpoint SHA-256 verification and confidence-based abstention gating, alongside security hardening.

Full release notes
v28.0.0

v28.0.0

Sep 29, 2026· 22 days ago

A major version update introducing significant breaking changes regarding Git network operations and security, alongside new features like audit logging and deploy tokens.

Full release notes