From 7e8d9fdd6366fc2d6c3cfb1f44233d6ce4ce0950 Mon Sep 17 00:00:00 2001 From: zzstoatzz Date: Sat, 3 Oct 2026 00:57:43 -0700 Subject: [PATCH] release: v0.6.0-alpha.3 (websocket 0.2.0-alpha.3) websocket.zig alpha.3 fixes a crash and cross-connection corruption when permessage-deflate connections are set up concurrently. 582/582 tests on zig 0.17.0. Co-Authored-By: Claude Opus 5.5 (1M context) --- CHANGELOG.md | 7 +++++++ build.zig.zon | 6 +++--- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index dafe240..db68e63 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,12 @@ # changelog +## 0.6.0-alpha.3 + +- **fix**: adopt websocket 0.2.0-alpha.3. Its server created pooled + permessage-deflate state without the connection manager's lock, so + connections set up at the same moment could share one compressor: corrupted + frames, then a crash. Affects any server built on websocket.zig through zat. + ## 0.6.0-alpha.2 - **fix**: builds on the zig 0.17.0 release. Adopts websocket 0.2.0-alpha.2; diff --git a/build.zig.zon b/build.zig.zon index 72c0d24..375ee76 100644 --- a/build.zig.zon +++ b/build.zig.zon @@ -1,6 +1,6 @@ .{ .name = .zat, - .version = "0.6.0-alpha.2", + .version = "0.6.0-alpha.3", .fingerprint = 0x8da9db57ee82fbe4, .minimum_zig_version = "0.17.0", .dependencies = .{ @@ -9,8 +9,8 @@ .hash = "zttp-0.2.0-alpha.1-RtrCGsaMAQCDWgks3PtxQytWSKUfConnosjyjjiBzC66", }, .websocket = .{ - .url = "https://tangled.org/zzstoatzz.io/websocket.zig/archive/v0.2.0-alpha.2.tar.gz", - .hash = "websocket-0.2.0-alpha.2-ZPISdd9ZBQAlweSmUfRIOl4m_BrcbeAmDT_5H6kA0aXC", + .url = "https://tangled.org/zzstoatzz.io/websocket.zig/archive/v0.2.0-alpha.3.tar.gz", + .hash = "websocket-0.2.0-alpha.3-ZPISdTdhBQCfitS39hRrh-l0dHYA1OFBj4TYKlujpcet", }, .@"atproto-interop-tests" = .{ .url = "https://github.com/bluesky-social/atproto-interop-tests/archive/35bb5638ab1e5ce71fb88a0c95953fc557ef1925.tar.gz", -- 2.51.2