From 49aaf288cc6658227c91bf878fa68cdb5385c8ae Mon Sep 17 00:00:00 2001 From: Daniel Chao Date: Fri, 28 Jun 2024 10:23:24 -0700 Subject: [PATCH] Cherry-pick release notes for 0.26.1 (#557) --- docs/modules/release-notes/pages/0.26.adoc | 2 +- .../release-notes/pages/changelog.adoc | 21 +++++++++++++++++++ 2 files changed, 22 insertions(+), 1 deletion(-) diff --git a/docs/modules/release-notes/pages/0.26.adoc b/docs/modules/release-notes/pages/0.26.adoc index 6fe837b3..a9a74dcd 100644 --- a/docs/modules/release-notes/pages/0.26.adoc +++ b/docs/modules/release-notes/pages/0.26.adoc @@ -1,6 +1,6 @@ = Pkl 0.26 Release Notes :version: 0.26 -:version-minor: 0.26.0 +:version-minor: 0.26.1 :release-date: June 17th, 2024 include::ROOT:partial$component-attributes.adoc[] diff --git a/docs/modules/release-notes/pages/changelog.adoc b/docs/modules/release-notes/pages/changelog.adoc index df30a7e8..5e25282f 100644 --- a/docs/modules/release-notes/pages/changelog.adoc +++ b/docs/modules/release-notes/pages/changelog.adoc @@ -6,6 +6,27 @@ include::ROOT:partial$component-attributes.adoc[] xref:0.27.adoc[Release notes] +[[release-0.26.1]] +== 0.26.1 (2024-06-28) + +=== Fixes + +* Fixes a regression where native executables fail to run on some environments that don't support newer CPU features (https://github.com/apple/pkl/pull/551[#551]). +* Fixes a `PklBugException` when passing `.` as a project directory to `pkl project resolve` and `pkl project package` (https://github.com/apple/pkl/pull/544[#544]). + +=== Changes + +* Disable revocation checking of TLS certificates (https://github.com/apple/pkl/pull/553[#553]). ++ +As part of HTTP improvements in 0.26, we unwittingly fixed a bug where Pkl does not actually perform cert revocation checks when making HTTPS requests. +This fix, unfortunately, caused a regression in some cases. +For example, this happens when connecting to a server that bears a public trust certificate, while in an environment with no internet access. +This is because the HTTP client needs to check the revocation status of all certificates in the chain. ++ +Revocation checks are a nuanced topic with some benefits, and also with its own problem areas. +For this reason, revocation checking is disabled for Pkl's native CLIs. +Users of Pkl's Java APIs will respect the revocation settings set in the JVM. + [[release-0.26.0]] == 0.26.0 (2024-06-17)