Tags: zed-industries/zed
Tags
Bump tree-sitter and related core language parser libraries (#14986) Closes #4565 To fix issues with code blocks' parsing in Markdown, a tree-sitter-markdown library update is needed. But `tree_sitter::language` is used in many places within core Zed, which forced more library updates. Release Notes: - Updated tree-sitter parsers for core languages --------- Co-authored-by: Max Brunsfeld <[email protected]> Co-authored-by: Piotr Osiewicz <[email protected]>
rpc: Add support for OAEP-based encryption format (#15058) This PR adds support for a new encryption format for exchanging access tokens during the authentication flow. The new format uses Optimal Asymmetric Encryption Padding (OAEP) instead of PKCS#1 v1.5, which is known to be vulnerable to side-channel attacks. **Note: We are not yet encrypting access tokens using the new format, as this is a breaking change between the client and the server. This PR only adds support for it, and makes it so the client and server can decrypt either format moving forward.** This required bumping the RSA key size from 1024 bits to 2048 bits. This is necessary to be able to encode the access token into the ciphertext when using OAEP. This also follows OWASP recommendations: > If ECC is not available and RSA must be used, then ensure that the key is at least 2048 bits. > > — [source](https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html#algorithms) Release Notes: - N/A
Remove `completion` dependency from `collab` (#15006) This was causing CI to fail when trying to deploy collab. Release Notes: - N/A Co-authored-by: Bennet <[email protected]>
PreviousNext