Release centraldogma-0.84.0 · line/centraldogma

The web UI now supports creating and viewing Central Dogma to Central Dogma mirrors using the dogma and dogma+https schemes. Previously, CD-to-CD mirrors could only be configured via the API. The mirror form conditionally hides the remote branch field when a dogma scheme is selected, since Central Dogma has no notion of branches. Additionally, gitignore patterns are now properly applied to CD-to-CD mirrors using JGit's IgnoreNode, matching the behavior of Git mirrors. #1308

CVE-2026-11746 (Critical, CVSS 9.4) — Hard-coded ZooKeeper replication secret ch4n63m3 with silent fallback enables cluster takeover. When operators omit the replication.secret configuration, the system silently substitutes a publicly known default, allowing an attacker to read the full replication log or impersonate a peer replica. GHSA-2j95-gqxf-v3vg
CVE-2026-11745 (High, CVSS 8.8) — SSH host-key verification permanently disabled in SshGitMirror. The SSH client's server-key verifier returns true unconditionally, allowing an on-path attacker to intercept mirror traffic, inject arbitrary commits, or capture SSH credentials. GHSA-vjfw-cpmh-xwv3
CVE-2026-11748 (Moderate, CVSS 6.9) — LDAP injection in SearchFirstActiveDirectoryRealm. The findUserDn() method performs raw substitution of usernames into LDAP filter templates without RFC 4515 metacharacter escaping, enabling authentication confusion, audit log evasion, and directory enumeration. GHSA-98q5-5qh2-7w75

Users and app identities can now be assigned repository roles directly without prior project-level registration. Previously, entities had to be added as project members before they could receive per-repository permissions, which made it impossible to grant access to a single repository without also granting project-wide member access. #1309 #930

Reverted the whole-repository caching logic that cached an entire repository to increase cache hit rates, as it caused correctness issues. Per-query caching is used again instead. #1306
Fixed an open redirect vulnerability in SamlAuthSsoHandler where an attacker-controlled RelayState value containing backslashes or ISO control characters could bypass the existing validation and redirect the browser to an off-origin URL after a successful SAML login. Unsafe values now fall back to /. #1312
Fixed a ZooKeeper replication bug where a replica could silently skip a log appended by another replica, causing local data to diverge and the replica to enter read-only mode with a "mismatching replay result" error. Pending logs are now replayed contiguously within storeLog so that no revision is ever skipped, and replication progress is recorded even during shutdown. #1313 #1314
A mirror with an invalid or missing credential no longer prevents the rest of the project's mirrors from being loaded and scheduled. Only the problematic mirror is skipped with a warning. #1316

Provide feedback