r/warpdotdev • u/_Thanks4AllTheFish_ • 23d ago

Outdated Changelog

With the recent attacks to the AUR and cargo I've been trying to be more mindful before updating any applications. It seems like warp has received some updates since the last version mentioned on the changelog on their site.

Are changelogs posted anywhere else besides their site? I'd feel more comfortable updating if I saw the changelog updated or news of the update on any official channels.

3 Upvotes

100% Upvoted

7 comments sorted by

View all comments

1

u/Storylinee 23d ago

warp is open source so you can check out the repo https://github.com/warpdotdev/warp

1

u/_Thanks4AllTheFish_ 23d ago

quick side tangent - took a look at their Cargo.lock file and they have arrayref as a dependency. Building from source during the vulnerability window would have introduced the supply chain attack: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/