Skip to content
This repository was archived by the owner on Jul 31, 2026. It is now read-only.

Commit f147389

Browse files
committed
chore: release version 5.0.2
1 parent 49439e0 commit f147389

3 files changed

Lines changed: 8 additions & 3 deletions

File tree

CHANGELOG.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
66
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
77

8+
## [5.0.2] - 2026-06-13 🛡️
9+
10+
### Security
11+
- **Runtime Validation for Skipped Fields:** Added a runtime validation layer to the query builder that immediately rejects any attempt to query columns marked with `#[orm(skip)]` or `#[sqlx(skip)]` using raw string builder methods (like `where_eq`). This fails fast with an `Error::Validation` before the SQL string is even passed to the database, ensuring that internal or virtual fields cannot be maliciously or accidentally queried.
12+
813
## [5.0.1] - 2026-06-13 🛠️
914

1015
### Performance

rullst-orm-macros/Cargo.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[package]
22
name = "rullst-orm-macros"
3-
version = "5.0.1"
3+
version = "5.0.2"
44
edition = "2024"
55
description = "Procedural macros for the rullst-orm ORM."
66
license = "MIT"

rullst-orm/Cargo.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[package]
22
name = "rullst-orm"
3-
version = "5.0.1"
3+
version = "5.0.2"
44
edition = "2024"
55
description = "An Active Record ORM for Rust."
66
license = "MIT"
@@ -10,7 +10,7 @@ categories = ["database"]
1010
readme = "../README.md"
1111

1212
[dependencies]
13-
rullst-orm-macros = { path = "../rullst-orm-macros", version = "5.0.1" }
13+
rullst-orm-macros = { path = "../rullst-orm-macros", version = "5.0.2" }
1414
sqlx = { version = "0.9", features = ["sqlite", "postgres", "mysql", "any", "runtime-tokio", "macros", "json"] }
1515
tokio = { version = "1", features = ["full"] }
1616
async-trait = "0.1"

0 commit comments

Comments
 (0)