From 4d2de93f377be70508fb5cc6103dd2dc46376547 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kyle=20=F0=9F=90=86?= Date: Sat, 20 Jun 2026 10:06:37 -0400 Subject: [PATCH] Update wisp to v0.5.4 (inbound worker use-after-free crash fix) --- Dockerfile | 4 ++-- startos/versions/current.ts | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index 6d217df..11049a6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -26,8 +26,8 @@ RUN case "${TARGETARCH}" in \ # Pinned to the latest upstream release. Bump WISP_VERSION and WISP_COMMIT to # update (see UPDATING.md). WISP_COMMIT is the immutable commit the tag points # to; the guard below fails the build if the tag is ever re-pointed. -ARG WISP_VERSION=v0.5.3 -ARG WISP_COMMIT=1a8ea8c0c7cada9bee0f73e6b430b4a5e7d66419 +ARG WISP_VERSION=v0.5.4 +ARG WISP_COMMIT=c811d1cd83a65549062c7a37c45468845794fe3b RUN git clone --branch ${WISP_VERSION} --depth 1 https://github.com/privkeyio/wisp.git /src && \ HEAD_SHA="$(git -C /src rev-parse HEAD)" && \ if [ "${HEAD_SHA}" != "${WISP_COMMIT}" ]; then \ diff --git a/startos/versions/current.ts b/startos/versions/current.ts index ca8ecae..c98c46b 100644 --- a/startos/versions/current.ts +++ b/startos/versions/current.ts @@ -1,10 +1,10 @@ import { IMPOSSIBLE, VersionInfo } from '@start9labs/start-sdk' export const current = VersionInfo.of({ - version: '0.5.3:0', + version: '0.5.4:0', releaseNotes: { en_US: - 'Updates wisp to v0.5.3: Spider now keeps its connections to upstream relays open and streaming instead of repeatedly reconnecting, so your feed stays current with far less churn. Includes the earlier crash-safe storage, Spider feed-freeze fix, removal of the per-IP connection cap behind the StartOS proxy, and a diagnosable (ReleaseSafe) build.', + 'Updates wisp to v0.5.4: fixes a crash (SIGSEGV) that hit the relay a few hours into sustained client traffic, caused by a use-after-free in the inbound connection worker. Confirmed stable across 13+ hours of real load. Carries forward all prior fixes: crash-safe storage, stable Spider upstream connections, no per-IP cap behind the StartOS proxy, and the diagnosable (ReleaseSafe) build.', }, migrations: { up: async ({ effects }) => {},