Compare commits

..
Author SHA1 Message Date
jackandClaude Opus 4.5 1e142dcda8 fix: Remove unused variable and bump version to 1.5.1
- Remove unused messageType variable (compiler warning fix)
- Bump marketing version to 1.5.1

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-28 10:30:38 -10:00
jackandGitHub ef4bdb3856 Merge branch 'main' into main 2026-01-28 07:55:00 -10:00
Ovi bbe1793506 fix: toctou in boundPeerID identified by codex 2026-01-28 10:52:02 +00:00
Ovi af7a664685 Fix iOS BLE mesh authentication bypass chain in BLEService
- Bind sender IDs to BLE connection UUIDs for peripherals and centrals to prevent spoofing
- Enforce explicit RSR request/response validation and remove legacy TTL==0 RSR path
- Remove TTL==0 unconditional acceptance for messages and file transfers
- Ensure gossip sync caching only occurs after a packet is accepted
- Preserve self‑sync TTL==0 dedup exception without weakening authentication
2026-01-27 15:14:21 +00:00

Diff Content Not Available