A new version of Rig is available: v1.0.0-beta.55
-
v1.0.0-beta.55
Security batch: path containment across Electron FS sinks, log XSS hardening, handoff URL allowlists, Docker name guards, Electron 39, and workflow least-privilege.
Shipped 12 Aug 2026 · Full changelog · Download for MacAdded
- Shared
safePathhelpers — all project/userData/home file IO asserts containment - Loopback-only guards for local HTTPS proxy upstreams and
customLocalUrl/openExternal - Rig-managed Docker container/volume name checks before
docker rm
Fixed
- Log viewer / WebLogger: HTML-escape ANSI output; env rows built with DOM APIs
- Electron upgraded 37 → 39.8.10 (EOL + advisories)
fast-uri/joseoverrides to patched versions- GitHub Actions release workflows: least-privilege permissions +
persist-credentials: false - Local dashboard Express binds to
127.0.0.1; websocket forced to loopback ensure-electronfinds hoisted monoreponode_modules/electron
Posted by Rig when this build hit userig.app/changelog. Feedback welcome in Bugs / Feature ideas — private tickets still go to Support.
- Shared
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login