jpillora/chisel
1
0
Fork 0
mirror of https://github.com/jpillora/chisel.git synced 2026-10-12 02:16:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
263 Commits 20 Branches 50 Tags
master
Commit Graph
263 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jaime PilloraandCodex GPT-6 5ee6c74d60 chore(release): prepare 1.13.0 prerelease notes 
- Document fixed-port SOCKS UDP support and reverse UDP peer hardening
- Select curated release notes by tag instead of reusing the 1.12.0 notes
- Keep the normal GoReleaser changelog fallback for other tags

Co-Authored-By: Codex GPT-6 <[email protected]>
v1.13.0 		2026-10-12 00:07:42 +11:00
Jaime PilloraandCodex GPT-6 a5796f95d2 feat(socks): add UDP ASSOCIATE with fixed-port udpsocks remotes (#624) 
Co-authored-by: Codex GPT-6 <[email protected]>
 2026-10-12 00:00:45 +11:00
Jaime PilloraandCodex GPT-5 3c00f04ca1 fix(tunnel): restrict reverse UDP return peers 
- record only listener peers observed from inbound UDP
- expire and cap peer state, rejecting untrusted destinations
- cover reverse UDP flow and destination validation

Co-Authored-By: Codex GPT-5 <[email protected]>
v1.12.1 		2026-09-01 20:44:13 +10:00
Jaime PilloraandCodex GPT-5.2 fe4f4fe7e6 fix(release): preserve all ko image platforms 
- publish a six-platform scratch and CA base to a local registry
- keep Buildx limited to the base image without QEMU
- verify ko publishes and copies identical six-platform indexes

Co-Authored-By: Codex GPT-5.2 <[email protected]>
v1.12.0 		2026-08-29 22:29:09 +10:00
Jaime PilloraandCodex GPT-5.2 7333825bf3 docs(release): prepare v1.12.0 notes 
- summarize reliability, security, and compatibility changes
- document the Go toolchain, SSH fix, and ko image pipeline
- mark 1.12 as ready for stable release

Co-Authored-By: Codex GPT-5.2 <[email protected]>
 2026-08-29 22:23:19 +10:00
Jaime PilloraandCodex GPT-5.2 e0b5ec2514 ci(release): publish container images with ko 
- replace deprecated Docker pipes with a six-platform ko index
- publish versioned images to GHCR and Docker Hub
- retain a scratch runtime with pinned CA roots and no QEMU build

Co-Authored-By: Codex GPT-5.2 <[email protected]>
 2026-08-29 22:23:14 +10:00
Jaime PilloraandCodex GPT-5.2 cea8e53826 fix(deps): update SSH security dependencies 
- build releases with Go 1.27.0
- update x/crypto to v0.55.0 for GO-2026-6303

Co-Authored-By: Codex GPT-5.2 <[email protected]>
 2026-08-29 22:23:08 +10:00
Jaime Pillora 70c44bc0ab chore(deps): use released opts wrapping fix 
- remove the local opts module replacement\n- upgrade opts to v1.8.1 for margin-aware help wrapping\n\nCo-Authored-By: Codex GPT-5 <[email protected]>
 2026-08-29 21:05:45 +10:00
Jaime Pillora 6e6170d230 feat: migrate CLI flags to opts 2026-08-29 00:54:23 +10:00
Jaime Pillora 6d283495b5 docs: organize 1.12 release notes 2026-08-09 10:06:37 +10:00
Jaime Pillora c408126df1 Harden the 1.12 release changes (#614) v1.12.0-rc3 2026-08-09 00:24:53 +10:00
Jaime PilloraandClaude Fable 5 016edaae00 fix(ci): bump goreleaser to v2.17.0, verify archive integrity (#611) 
goreleaser v2.12.7 silently produced corrupt .gz assets in v1.12.0-rc1 (#610); v2.17.0 verified clean 3/3 A/B. Adds a post-goreleaser gzip/unzip -t integrity gate so corrupt archives fail the release job before any draft can be published.

Co-Authored-By: Claude Fable 5 <[email protected]>
v1.12.0-rc2 		2026-07-19 00:19:00 +10:00
Jaime PilloraandClaude Fable 5 e588d2163e 1.12: reliability & security pass (#609) 
Reliability, security, and observability across client/server/tunnel:
keepalive ping timeouts, TCP half-close propagation, dial-before-accept,
graceful SIGTERM shutdown, UDP flow-cap sweep, pre-auth WS size cap,
SOCKS ACL enforcement + live authfile reload, exact legacy-fingerprint
match, --auth validation, session/failed-login logs, #608 panic fix,
goreleaser multi-arch Docker images, and a two-stage release pipeline
(draft + versioned images at tag time; latest promoted on publish).

Full detail: 1.12-changes.md, the PR (34 commits), and
https://jpillora.com/chisel-112-ux-review

Co-Authored-By: Claude Fable 5 <[email protected]>
v1.12.0-rc1 		2026-07-18 01:10:50 +10:00
dependabot[bot] 310eec3696 Bump golang.org/x/crypto from 0.48.0 to 0.52.0 (#606) 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v1.11.8 		2026-07-10 22:47:42 +10:00
Jaime PilloraandClaude Opus 4.8 927abde999 Improve SOCKS auth: enforce per-user ACL on socks channels (#591) 
Co-authored-by: Claude Opus 4.8 <[email protected]>
v1.11.7 		2026-06-27 23:02:05 +10:00
Jaime PilloraandClaude Opus 4.7 b9d12191f6 Fix race in tunnel waitGroup causing negative counter panic (#586) 
Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>
v1.11.6 		2026-05-01 08:14:30 +10:00
Jaime PilloraandClaude Opus 4.6 44310b6566 Enforce auth ACL on tunnel channels 
Previously, authfile ACL restrictions were only checked during the
initial config handshake. This adds ACL enforcement at the tunnel
layer when processing SSH channel requests, ensuring that each
outbound connection is validated against the user's allowed addresses.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
v1.11.5 		2026-03-09 20:47:37 +11:00
Jaime PilloraandClaude Opus 4.6 4df5fcf525 Update deps and fix crypto/tls vulnerability (#578) 
Co-authored-by: Claude Opus 4.6 <[email protected]>
v1.11.4 		2026-02-16 00:54:09 +11:00
Jaime PilloraandClaude Opus 4.6 57d224943d Update all dependencies 
Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 00:31:18 +11:00
Jaime Pillora d56938d7a2 fix goreleaser 
and undo some AI changes 😔
v1.11.3 		2025-09-14 10:02:05 +10:00
Jaime Pillora 864b1c0b31 Fix goreleaser Windows ARM32 builds and CI compatibility 
- Remove obsolete Windows ARM32 build exclusions from goreleaser
- Add GOTOOLCHAIN=auto to CI for Go version compatibility
- Windows ARM32 builds work fine with modern Go versions

💖 Generated with Crush
Co-Authored-By: Crush <[email protected]>
v1.11.2 		2025-09-11 23:36:38 +00:00
Copilotandjpillora 5ac1a226f7 Fix CI workflow Go version to match go.mod requirement (#572) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: jpillora <[email protected]>
v1.11.1 		2025-09-12 07:10:15 +10:00
Copilotandjpillora 8ce920a820 Bump Go version to 1.25.1 and update all dependencies (#568) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: jpillora <[email protected]>
v1.11.0 		2025-09-11 22:18:57 +10:00
Copilotandjpillora 91d0f66cfa Fix CHISEL_KEY environment variable ignored when --keyfile not set (#571) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: jpillora <[email protected]>
 2025-09-11 22:17:06 +10:00
Jaime Pillora ab8f06a830 always test with latest stable 
binaries are already released with latest goreleaser, docker image uses alpine:go, both are latest stable go, so makes sense to always test with latest stable too
 2024-09-29 09:35:05 +10:00
Jaime Pillora 3208da347e fix chisel version in docker image (closes #228) v1.10.1 2024-09-29 09:32:04 +10:00
Jaime Pillora 59e5362e6b Bump to Go 1.22. Add .rpm .deb and .akp to releases. Fix bad version comparison. v1.10.0 2024-08-05 15:50:20 +10:00
dependabot[bot] 3de177432c Bump actions/setup-go from 3 to 5 (#484) 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-02 07:46:37 +11:00
dependabot[bot] 2efe855c4d Bump golang.org/x/sync from 0.3.0 to 0.5.0 (#472) 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-02 07:45:10 +11:00
dependabot[bot] b75390b2b4 Bump golang.org/x/crypto from 0.12.0 to 0.16.0 (#473) 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-02 07:44:39 +11:00
guangwu dca1156401 chore: remove refs to deprecated io/ioutil (#459) 
thanks @testwill
 2023-10-19 22:58:31 +11:00
maurerr 4eb9e6a87f add arm v5 builds (#395) v1.9.1 2023-08-20 16:50:40 +10:00
Jaime Pilloraandcmeng 69093be1d9 Bump to Go 1.21 (#440) 
Co-authored-by: cmeng <[email protected]>
v1.9.0 		2023-08-19 11:00:41 +10:00
Jaime Pillora ce307e580c move chisel to flyio 2023-01-28 17:01:37 +11:00
Jaime Pillora 3bdf6afc2d update dependabot v1.8.1 2023-01-28 10:58:39 +11:00
Jaime Pillora 5ad1141361 switch to scratch image v1.8.0 2023-01-28 10:42:29 +11:00
Jaime Pillora feb571f714 actions: setup go v3 2023-01-28 08:06:36 +11:00
Guillaume SMAHA e78ccc3497 Fix missing NetDialContext: c.config.DialContext (#398) 2023-01-28 08:00:02 +11:00
Jaime Pillora e546a6d6cb docker to use scratch 2023-01-28 07:59:05 +11:00
Jaime Pillora 4246b649e1 docker alpine->google-distroless 2023-01-27 23:02:06 +11:00
Guillaume SMAHA fbc8ad9731 Fix #390: Use code to generate certificates for client & server (#400) 2023-01-27 22:50:23 +11:00
Jaime Pillora 556db3efad add EnvBool 2022-10-31 16:08:20 +11:00
zuzgonBarak Sharonibarak-sharoni-velocity
 		200a8e25d7 Providing chisel's client with a logger level (#281) 
Co-authored-by: Barak Sharoni <[email protected]>
Co-authored-by: barak-sharoni-velocity <[email protected]>
 2022-10-31 15:56:27 +11:00
invist 4f58a395f6 Update version.go (#288) 2022-10-31 15:54:57 +11:00
BigSullyandbar ed6adb98bc Respond to /health and /version by request path rather than by the whole url string (#328) 
Co-authored-by: bar <[email protected]>
 2022-10-31 15:53:36 +11:00
0xflotus 28a5018b8b fix: small typo error in main.go (#334) 2022-10-31 15:52:31 +11:00
andres-portainerandandres-portainer 3e703ae0fe Add locking around the connection count to fix a data race. (#342) 
Co-authored-by: andres-portainer <[email protected]>
 2022-10-31 15:46:46 +11:00
fsiegmund 230f7147ee UDP buffer size override with CHISEL_UDP_MAX_SIZE environment variable (#367) 2022-10-31 15:41:44 +11:00
dependabot[bot] dd19bc696c Bump github.com/fsnotify/fsnotify from 1.4.9 to 1.6.0 (#389) 
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-31 15:10:15 +11:00
Jaime Pillora 4cd7b3607e Merge pull request #381 from jpillora/dependabot/github_actions/actions/checkout-3.1.0 
Bump actions/checkout from 2 to 3.1.0
 2022-10-31 15:07:57 +11:00