v0.1.2
v0.1.2 (LTS)
Security 4
- Update SpiderMonkey from ESR 140.10 to 140.12 to pull in security fixes from MFSA 2026-48 and MFSA 2026-58
- Backport 24 security related changes to the LTS
- Harden javascript: URL evaluation
- Pass rooted UnderlyingSourceContainer to ReadableStream
From servo
What's Changed
This release includes an updated Spidermonkey from ESR 140.10 to 140.12, pulling in security fixes from MFSA 2026-48 and MFSA 2026-58, including https://github.com/advisories/GHSA-6cv4-3h2g-632h, https://github.com/advisories/GHSA-93pv-vhrf-wv64 and https://github.com/advisories/GHSA-4885-5pch-3x6m. Additionally, we backported 24 security related changes to the LTS. View the full changelog below for more details.
- LTS: Cherry-pick 22 commits onto the 0.1 LTS release branch by @jschwe in https://github.com/servo/servo/pull/46006
- LTS: Update mozjs to SM ESR 140.12 by @jschwe in https://github.com/servo/servo/pull/46038
- backport: script: Harden javascript: URL evaluation. (#45913) by @jschwe in https://github.com/servo/servo/pull/46088
- backport: script: Pass rooted UnderlyingSourceContainer to ReadableSt… by @jschwe in https://github.com/servo/servo/pull/46086
- LTS: Prepare 0.1.2 release by @jschwe in https://github.com/servo/servo/pull/46112
- Backported a few CI fixes to related to publishing
Full Changelog: https://github.com/servo/servo/compare/v0.1.1...v0.1.2