200 commits

Author	SHA1	Message	Date
denobot	4c1cdfc9a4	2.5.1 (#30753) ... Bumped versions for 2.5.1 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-09-17 01:58:00 +02:00
denobot	ddebcc01d9	2.5.0 (#30673) ... Bumped versions for 2.5.0 Co-authored-by: littledivy <littledivy@users.noreply.github.com>	2025-09-10 09:17:46 +05:30
Leo Kettmeir	e02e4c2042	feat: permission audit log (#30575) ... Adds a `DENO_PERMISSIONS_AUDIT` env var to set the path for a JSONL permission audit log, with contains the permission and value. Additionally this can be combined with `DENO_TRACE_PERMISSIONS`, which will then include the traces in the audit log too.	2025-09-08 14:23:11 +02:00
David Sherret	17d02c228f	feat: permissions in the config file (#30330) ... Co-authored-by: nathanwhit <nathanwhit@users.noreply.github.com>	2025-09-02 13:37:33 +00:00
David Sherret	b7cebbd4a9	refactor(permissions): remove all state in permissions (#30548)	2025-08-28 13:24:09 -04:00
denobot	b7061b0f64	2.4.5 (#30476) ... Bumped versions for 2.4.5 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-08-21 13:41:58 +02:00
David Sherret	228574b042	chore: fix lint warnings (#30399)	2025-08-13 20:25:57 -04:00
denobot	5129d036eb	2.4.4 (#30396) ... Bumped versions for 2.4.4 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-08-13 22:26:24 +02:00
林炳权	68297b5f10	chore: Rust 1.89.0 (#30364) ... Related PR: https://github.com/denoland/deno/pull/30354	2025-08-09 11:11:48 +00:00
denobot	5612d2edc7	2.4.3 (#30251) ... Bumped versions for 2.4.3 Please ensure: - [x] Crate versions are bumped correctly - [x] Releases.md is updated correctly (think relevancy and remove reverts) To make edits to this PR: ```shell git fetch upstream release_2_4.3 && git checkout -b release_2_4.3 upstream/release_2_4.3 ``` cc @crowlKats --------- Signed-off-by: Leo Kettmeir <64b2b6d@kettmeir.dev> Co-authored-by: crowlKats <crowlKats@users.noreply.github.com> Co-authored-by: Leo Kettmeir <crowlkats@toaxl.com>	2025-07-30 22:25:42 +00:00
David Sherret	c70e713b5b	refactor: remove more allocations querying for permissions (#30237)	2025-07-29 15:51:07 -04:00
David Sherret	85d342c045	refactor: use Cow<Path> more in permissions (#30227) ... Towards and removing more allocations.	2025-07-29 07:11:57 -04:00
David Sherret	32baa286b7	refactor: update to deno_path_util 0.5.2 (#30211)	2025-07-27 08:44:29 -04:00
David Sherret	990dbc6e4e	Revert "fix(unstable): always require --allow-read permissions for raw imports (#30184)" (#30196)	2025-07-24 22:38:04 +00:00
David Sherret	147bbcf8dd	fix(unstable): always require --allow-read permissions for raw imports (#30184)	2025-07-24 08:26:36 -04:00
denobot	622c351393	2.4.2 (#30123) ... Bumped versions for 2.4.2 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-07-16 12:51:04 +02:00
David Sherret	70c875d2a3	refactor: update to use which 8.0 and deno_task_shell 0.25 (#30081)	2025-07-11 14:28:36 -04:00
David Sherret	76ce7768ab	refactor(permissions): remove access check callback (#30050) ... 1. Removes the access check callback, which was kind of confusing. 1. Requires `CheckedPath` for everything in the `FileSystem` trait to ensure we're always checking permissions.	2025-07-10 21:40:20 -04:00
David Sherret	2617b4ec6b	refactor(permissions): push down special file checking to permissions container (#30005)	2025-07-09 20:50:26 +00:00
denobot	c03199ea1e	2.4.1 (#30026) ... Bumped versions for 2.4.1 --------- Signed-off-by: Leo Kettmeir <64b2b6d@kettmeir.dev> Co-authored-by: crowlKats <crowlKats@users.noreply.github.com> Co-authored-by: Leo Kettmeir <crowlkats@toaxl.com>	2025-07-08 07:15:35 +02:00
Nathan Whitaker	9379a74e08	chore: update to edition 2024 (#29923)	2025-07-02 17:59:39 -07:00
denobot	45dfae18ee	2.4.0 (#29959) ... Co-authored-by: dsherret <dsherret@users.noreply.github.com>	2025-07-01 16:21:05 -04:00
sgasho	b5e41f605d	feat: Add --deny-import flag (#29702) ... Closes: #29502 This commit adds a complementary flag to the "--allow-import" flag, that allows to deny certain hosts. --------- Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-06-28 12:59:18 +00:00
Simon Lecoq	7554b28a04	fix: support Deno.permissions.query({name:"import"}) (#29610) ... Closes #27050	2025-06-26 22:13:56 +02:00
David Emanuel Buchmann	3cefece2da	feat: --allow-net supports CIDR ranges (#29704) ... This commit adds support for specifying CIDR ranges in `--allow-net` and `--deny-net` flag: Eg: trying to run `deno run --allow-net --deny-net=192.168.0.0/16` and `fetch` from `http://127.0.0.1:4545/` will raise `NotCapable` error.	2025-06-26 22:13:04 +02:00
Nayeem Rahman	99ae41f6bb	feat: stabilize --allow-net subdomain wildcards (#29902) ... Closes #29499.	2025-06-26 17:00:43 +00:00
denobot	0d76cd50af	2.3.7 (#29853) ... Bumped versions for 2.3.7 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-06-23 23:51:36 +02:00
denobot	d2d8d3775f	2.3.6 (#29722) ... Bumped versions for 2.3.6 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-06-12 14:33:24 +02:00
Nayeem Rahman	833fbfd3ad	ci: fix features for nix in permissions/Cargo.toml (#29511)	2025-05-29 20:26:37 +00:00
denobot	644efa157e	2.3.4 (#29510)	2025-05-29 20:00:31 +01:00
Nayeem Rahman	ab9673dcc1	feat(unstable): --allow-net subdomain wildcards (#29327)	2025-05-29 04:05:37 +01:00
David Sherret	cb23193f74	refactor: allow deno_permissions to compile to wasm32-unknown-unknown (#29487)	2025-05-28 18:27:42 +00:00
David Sherret	e3bf5ee5db	refactor: remove deno_core dependency from deno_permissions (#29467) ... For making this code more usable without deno_core. Will be useful in deno_resolver.	2025-05-27 16:00:04 +00:00
林炳权	cb738ee5da	chore: Rust 1.86.0 (#29435) ... Since `rust 1.87.0` reported `undefined symbol: ring::pbkdf2::PBKDF2_HMAC_SHA1::*` in CI and it was difficult to debug locally, use `rust 1.86.0` in CI tests for troubleshoot the errors	2025-05-25 23:40:48 +02:00
denobot	7b74f38539	2.3.2 (#29320) ... Bumped versions for 2.3.2 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-05-16 01:18:59 +02:00
Nayeem Rahman	ef315b56c2	fix: handling of contradictory global permission flags (#29213)	2025-05-08 23:24:35 +02:00
denobot	61574bb9c9	2.3.0 (#29102) ... Bumped versions for 2.3.0 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-04-30 09:49:31 +02:00
Nathan Whitaker	c22d17824b	perf(fs): don't canonicalize path when opening file if --allow-all is passed (#28716) ... Fixes #28702. Super artificial benchmark: ```ts const perf = performance; async function asyncOpen() { const start = perf.now(); for (let i = 0; i < 100_000; i++) { const file = await Deno.open("./foo.txt"); file.close(); } const end = perf.now(); console.log(end - start); } function syncOpen() { const start = perf.now(); for (let i = 0; i < 100_000; i++) { const file = Deno.openSync("./foo.txt"); file.close(); } const end = perf.now(); console.log(end - start); } if (Deno.args[0]?.trim() === "async") { await asyncOpen(); } else { syncOpen(); } ``` Results (average of 10 for each): ``` deno sync 1785.59 deno-this-pr sync 491.69 deno async 1839.71 deno-this-pr async 528.78 ``` --------- Co-authored-by: David Sherret <dsherret@users.noreply.github.com>	2025-04-29 23:16:24 +00:00
Bartek Iwańczuk	f2ae7a19f4	fix: make --allow-env stronger that --deny-env (#29079)	2025-04-28 19:28:38 +02:00
denobot	6e86063c03	chore: forward v2.2.12 release commit to main (#29044) ... Co-authored-by: dsherret <dsherret@users.noreply.github.com>	2025-04-24 20:22:57 -04:00
denobot	9591c11633	chore: forward v2.2.11 release commit to main (#28958) ... This is the release commit being forwarded back to main for 2.2.11 --------- Co-authored-by: bartlomieju <bartlomieju@users.noreply.github.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>	2025-04-18 17:21:06 +02:00
denobot	2e826dfc9d	chore: forward v2.2.10 release commit to main (#28897) ... This is the release commit being forwarded back to main for 2.2.10 Co-authored-by: nathanwhit <nathanwhit@users.noreply.github.com> Co-authored-by: Nathan Whitaker <nathan@deno.com>	2025-04-14 16:10:16 -07:00
Nayeem Rahman	98b7554aaf	chore: forward v2.2.9 release commit to main (#28859)	2025-04-11 22:45:54 +00:00
snek	9da231dc7a	feat: support linux vsock (#28725) ... impl support for vsock https://man7.org/linux/man-pages/man7/vsock.7.html	2025-04-11 07:35:05 +02:00
denobot	1086a75cc9	chore: forward v2.2.8 release commit to main (#28762) ... Co-authored-by: dsherret <dsherret@users.noreply.github.com>	2025-04-05 03:09:25 +00:00
denobot	08274e0621	chore: forward v2.2.7 release commit to main (#28746) ... This is the release commit being forwarded back to main for 2.2.7 Signed-off-by: Divy Srivastava <dj.srivastava23@gmail.com> Co-authored-by: Divy Srivastava <dj.srivastava23@gmail.com>	2025-04-04 16:14:30 +05:30
denobot	a1724f5d5a	chore: forward v2.2.6 release commit to main (#28657) ... This is the release commit being forwarded back to main for 2.2.6 Co-authored-by: littledivy <littledivy@users.noreply.github.com>	2025-03-28 13:32:27 +05:30
denobot	43f6137d92	chore: forward v2.2.5 release commit to main (#28579) ... NOTE: Commit 27363d389 was incorrectly landed in main before the release completed and is not included in v2.2.5. The official v2.2.5 release was made from the v2.2 branch.	2025-03-21 06:25:03 -07:00
denobot	5f00b9700f	chore: forward v2.2.4 release commit to main (#28500)	2025-03-14 15:40:38 -07:00
denobot	d91402ae20	chore: forward v2.2.3 release commit to main (#28391) ... This is the release commit being forwarded back to main for 2.2.3 Co-authored-by: littledivy <littledivy@users.noreply.github.com>	2025-03-05 05:57:04 +00:00