diff --git a/CHANGELOG.md b/CHANGELOG.md
index 928ea944..7af2ceb2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
# Changelog
+## [0.10.2] -- 2022-09-22
+
+### Security release
+
+- Fixes potential secret poisoning by the homeserver
+- A crash when validation malicious html
+
+Thanks to the matrix.org security team for disclosing this issue.
+
+An update is highly recommended. Otherwise you can temporarily protect against
+this issue by not verifying your own devices and not pressing the request button
+in the setting.
+
## [0.10.1] -- 2022-09-07
### Highlights
diff --git a/CMakeLists.txt b/CMakeLists.txt
index da5f29ae..d8088376 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -108,7 +108,7 @@ include(GNUInstallDirs)
set(CPACK_PACKAGE_VERSION_MAJOR "0")
set(CPACK_PACKAGE_VERSION_MINOR "10")
-set(CPACK_PACKAGE_VERSION_PATCH "1")
+set(CPACK_PACKAGE_VERSION_PATCH "2")
set(PROJECT_VERSION_MAJOR ${CPACK_PACKAGE_VERSION_MAJOR})
set(PROJECT_VERSION_MINOR ${CPACK_PACKAGE_VERSION_MINOR})
set(PROJECT_VERSION_PATCH ${CPACK_PACKAGE_VERSION_PATCH})
diff --git a/appveyor.yml b/appveyor.yml
index f0930d19..0db56109 100644
--- a/appveyor.yml
+++ b/appveyor.yml
@@ -1,6 +1,6 @@
---
-version: 0.10.1-{build}
+version: 0.10.2-{build}
configuration: Release
image: Visual Studio 2019
@@ -31,8 +31,8 @@ build_script:
# VERSION format: branch-master/branch-1.2
# INSTVERSION format: x.y.z
# WINVERSION format: 9999.0.0.123/1.2.0.234
- - if "%APPVEYOR_REPO_TAG%"=="false" set INSTVERSION=0.10.1
- - if "%APPVEYOR_REPO_TAG%"=="false" set VERSION=0.10.1
+ - if "%APPVEYOR_REPO_TAG%"=="false" set INSTVERSION=0.10.2
+ - if "%APPVEYOR_REPO_TAG%"=="false" set VERSION=0.10.2
- if "%APPVEYOR_REPO_TAG%"=="false" if "%APPVEYOR_REPO_BRANCH%"=="master" set INSTVERSION=9999.0
- if "%APPVEYOR_REPO_TAG%"=="false" set WINVERSION=%INSTVERSION%.0.%APPVEYOR_BUILD_NUMBER%
# VERSION format: v1.2.3/v1.3.4
@@ -94,8 +94,8 @@ after_build:
- copy %BUILD%\deploy\installer\gui\package.xml installer\packages\io.github.nhekoreborn.nheko\meta
- copy %BUILD%\deploy\installer\gui\installscript.qs installer\packages\io.github.nhekoreborn.nheko\meta
# Amend version and date
- - sed -i "s/__VERSION__/0.10.1/" installer\config\config.xml
- - sed -i "s/__VERSION__/0.10.1/" installer\packages\io.github.nhekoreborn.nheko\meta\package.xml
+ - sed -i "s/__VERSION__/0.10.2/" installer\config\config.xml
+ - sed -i "s/__VERSION__/0.10.2/" installer\packages\io.github.nhekoreborn.nheko\meta\package.xml
- sed -i "s/__DATE__/%DATE%/" installer\packages\io.github.nhekoreborn.nheko\meta\package.xml
# Copy nheko data
- xcopy NhekoData\*.* installer\packages\io.github.nhekoreborn.nheko\data\*.* /s /e /c /y
diff --git a/io.github.NhekoReborn.Nheko.yaml b/io.github.NhekoReborn.Nheko.yaml
index e7684652..b5aea92e 100644
--- a/io.github.NhekoReborn.Nheko.yaml
+++ b/io.github.NhekoReborn.Nheko.yaml
@@ -23,17 +23,11 @@ cleanup:
- /bin/mdb*
- '*.a'
- /libexec
- - /lib/girepository-1.0/
- - /lib/gst-validate-launcher/
- - /lib/gstreamer-1.0/include/
- - /lib/gstreamer-1.0/validate/
- /lib/cmake/
- - /bin/gst-*
- /bin/cmark
- /bin/event_rpcgen.py
- /bin/playout
- /bin/secret-tool
- - /share/gir-1.0
modules:
- name: lmdb
sources:
@@ -151,30 +145,6 @@ modules:
- sha256: 1155fd1a83049767360e9a120c43c578145db3204d2b309eba49fbbedd0f4ed3
type: archive
url: https://github.com/nlohmann/json/archive/v3.10.4.tar.gz
- - buildsystem: meson
- name: gstreamer
- sources:
- - commit: ccf22e315cedf81e0075ab179ffb1b733da5206e
- tag: 1.20.3
- type: git
- url: https://gitlab.freedesktop.org/gstreamer/gstreamer.git
- config-opts:
- - -Dcompositor=enabled
- - -Dgl=enabled
- - -Dgood=enabled
- - -Dgst-plugins-good:pulse=enabled
- - -Dgst-plugins-good:qt5=enabled
- - -Dgst-plugins-good:rtp=enabled
- - -Dgst-plugins-good:rtpmanager=enabled
- - -Dgst-plugins-good:vpx=enabled
- - -Dbad=enabled
- - -Dgst-plugins-bad:dtls=enabled
- - -Dgst-plugins-bad:gl=enabled
- - -Dgst-plugins-bad:openh264=enabled
- - -Dgst-plugins-bad:opus=enabled
- - -Dgst-plugins-bad:srtp=enabled
- - -Dgst-plugins-bad:webrtc=enabled
- - -Dgst-plugins-bad:flite=disabled
- buildsystem: qmake
name: qt-jdenticon
no-make-install: true
diff --git a/resources/nheko.appdata.xml.in b/resources/nheko.appdata.xml.in
index 5d6a87fb..58372b72 100644
--- a/resources/nheko.appdata.xml.in
+++ b/resources/nheko.appdata.xml.in
@@ -61,6 +61,7 @@
https://github.com/Nheko-Reborn/nheko
https://github.com/Nheko-Reborn
+