NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Go modules, #3372 by repository stars
Latest stable
v0.7.0
Last release 4 months ago
18 Jun 2026
Ships unpredictably
gaps range from 8 days to 6 months
Nearly every release is documented
notes for 22 of 22 stable releases
Nothing withdrawn
no release was ever pulled
10 years old
152 releases · first in 2017
Drag across the ruler to compare, or tap a release to open it.
Some minor changes were made to how lexical components (like .. and .) are handled during path generation in SecureJoin. There is no behaviour change
.. and .)
are handled during path generation in SecureJoin. There is no behaviour
change as a result of this fix (the resulting paths are the same).Nothing published for this version
This release fixes a potential security issue in filepath-securejoin when used on Windows ([GHSA-6xv5-86q9-7xr8][], which could be used to generate pa
Your coding agent can read these notes before it upgrades. Set up the MCP server →
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Switch to Go 1.13-style %w error wrapping, letting us drop the dependency on github.com/pkg/errors.
%w error wrapping, letting us drop the dependency
on github.com/pkg/errors.Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Use syscall.ELOOP as the base error for symlink loops, rather than our own (internal) error. This allows callers to more easily use errors.Is to check
syscall.ELOOP as the base error for symlink loops, rather than our own
(internal) error. This allows callers to more easily use errors.Is to check
for this case.Nothing published for this version
Nothing published for this version
Use our own IsNotExist implementation, which lets us handle ENOTDIR properly within SecureJoin.
IsNotExist implementation, which lets us handle ENOTDIR
properly within SecureJoin.We now have 100% test coverage!
We now have 100% test coverage!
SecureJoinVFS API that can be used for mocking (as we do in our new
tests) or for implementing custom handling of lookup operations (such as for
rootless containers, where work is necessary to access directories with weird
modes because we don't have CAP_DAC_READ_SEARCH or CAP_DAC_OVERRIDE).This is our first release of github.com/cyphar/filepath-securejoin, containing a full implementation with a coverage of 93.5% (the only missing cases
This is our first release of github.com/cyphar/filepath-securejoin,
containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
One column per quarter.