Skip to content

Commit 98f0c17

Browse files
author
Kevin Westphal
committed
chore(release): 1.44.0
1 parent 5ec9fdf commit 98f0c17

7 files changed

+29
-171
lines changed

CHANGELOG.md

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,32 @@
11
# Changelog
22

3+
<a id='changelog-1.44.0'></a>
4+
5+
## 1.44.0 — 2025-10-27
6+
7+
### Added
8+
9+
- Added `--insecure` CLI option and `insecure` configuration setting as clearer alternatives to `--allow-self-signed` and `allow_self_signed`. The new option explicitly communicates that SSL verification is completely disabled, making the connection vulnerable to man-in-the-middle attacks.
10+
- Added prominent warning messages when SSL verification is disabled (via either `--insecure` or `--allow-self-signed`), explaining the security risks and recommending the secure alternative of using the system certificate trust store (available with Python >= 3.10).
11+
12+
### Changed
13+
14+
- Removed Clear Linux from the OS package testing workflow as the project has been discontinued.
15+
16+
### Deprecated
17+
18+
- The `--allow-self-signed` CLI option and `allow_self_signed` configuration setting are now deprecated in favor of `--insecure` and `insecure`. Deprecation warnings are displayed when these options are used, guiding users to the clearer alternative. Both options remain functional for backward compatibility and will be maintained for an extended deprecation period before removal.
19+
20+
### Fixed
21+
22+
- Fixed crash when API returns scopes not yet recognized by py-gitguardian.
23+
24+
- Skip non-seekable files instead of crashing.
25+
26+
### Security
27+
28+
- Improved clarity around SSL verification settings. The `--allow-self-signed` option name was misleading as it suggests certificate validation is still performed, when in reality all SSL verification is disabled. The new `--insecure` option makes this behavior explicit. Both options remain functional for backward compatibility.
29+
330
<a id='changelog-1.43.0'></a>
431

532
## 1.43.0 — 2025-08-27

actions/secret/action.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ inputs:
1616

1717
runs:
1818
using: 'docker'
19-
image: 'docker://gitguardian/ggshield:v1.43.0'
19+
image: 'docker://gitguardian/ggshield:v1.44.0'
2020
entrypoint: '/app/docker/actions-secret-entrypoint.sh'
2121
args:
2222
- ${{ inputs.args }}

changelog.d/20251014_145559_salome.voltz.md

Lines changed: 0 additions & 42 deletions
This file was deleted.

changelog.d/20251014_155609_salome.voltz_remove_test_on_clearlinux.md

Lines changed: 0 additions & 41 deletions
This file was deleted.

changelog.d/20251016_101312_ghislain.casier_add_insecure_option.md

Lines changed: 0 additions & 44 deletions
This file was deleted.

changelog.d/20251020_174722_salome.voltz_scrt_5971_ggshield_runs_into_oserror_errno_22_invalid_argument_when.md

Lines changed: 0 additions & 42 deletions
This file was deleted.

ggshield/__init__.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
__version__ = "1.43.0"
1+
__version__ = "1.44.0"

0 commit comments

Comments
 (0)