Version 4.2.1 Released
Breaking Changes
We normally don't release breaking changes without bumping the major version, but due to some upcoming changes to Redwood, we're making an exception due to the low impact.
- The
FRedwoodPlayerInventoryChangedstruct now usesURedwoodPlayerStateComponentinstead ofARedwoodPlayerState - Deploying to
stagingorproductionlike environments will now fail if you have not changed default secret config vars. You can test whether or not it'll fail (and which variables need to be changed) with the newyarn check-secrets <config-env>command. This is to help prevent you from shipping vulnerable secrets.
Bug Fixes
- We've implemented an extensive suite of security fixes after doing a large audit of Redwood systems
- More config variables can now be used in the secrets system (search for
This can be a secret in the secrets providerinconfig/node/defaultfor all instances) - Updated dependencies for CVE vulnerabilities
- Fixed sync items
- Fixed zone data
- Fixed bugs related to using the Queue provider with
AGameMode - Fixed issues with the
localsecrets provider - Fixed regex for private IP detection (primarily impacted with some environments like Azure)
