Hello everyone,
I'm glad to share that kcp v0.28.3 has been released. This is
the second patch release in the 0.28.x series, being off by one
due to a release pipeline issue with v0.28.2. v0.28.2 is thus
not a valid release.
This patch release fixes two issues, one regression with some
schemas not being served properly, and an issue with the
initializingworkspaces Virtual Workspace that could result in a
security vulnerability related to usage of initializers. Please
see the GitHub
advisory for details. Thank you to Simon Bein for finding
and fixing this issue.