Snowflake-Labs/sansshell v1.64.0

v1.64.0

Repository: Snowflake-Labs/sansshell

Tag: v1.64.0

Published: 2026-08-28T10:04:37Z

Prerelease: no

Release notes:

What's Changed

• fix(fdb): reject Conf RPCs with missing location by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/629
• Fix CWE-93 newline injection in DOTENV DataSet writer by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/626
• fix(process): reject uint64 PIDs that wrap to negative by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/624
• proxy/server: finish the RPC when the client half-closes by @sfc-gh-pkowalewski in https://github.com/Snowflake-Labs/sansshell/pull/628
• fix(process): bounds-check GetJavaStacks thread parsing by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/630
• fix(mpa): bound size of stored approval payloads by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/633
• fix(localfile): reject invalid grep patterns instead of panicking by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/632
• fix(telemetry): bound processing of prefixed metadata headers by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/631
• fix(localfile): reject symlinks in SetFileAttributes by @sfc-gh-ikryvanos in https://github.com/Snowflake-Labs/sansshell/pull/627

Full Changelog: https://github.com/Snowflake-Labs/sansshell/compare/v1.63.0...v1.64.0