v1.32.0

This release introduces the new Bare.Addon.seal() API to permanently drop the addon loading capability of a Bare process. Embedders may use this API to first load a trusted set of addons, then seal addon loading, and finally load potentially untrusted JavaScript code. The seal guarantees that no new native code can be brought into the Bare process, restricting JavaScript code to the set of trusted addons loaded by the embedder.

What's Changed

• Handle reentrant exception and rejection listeners by @kasperisager in https://github.com/holepunchto/bare/pull/184
• Wait for threads to be ready before suspending in tests by @kasperisager in https://github.com/holepunchto/bare/pull/186
• Audit the workflows on every change by @bavulapati in https://github.com/holepunchto/bare/pull/187
• Add Addon.seal() by @kasperisager in https://github.com/holepunchto/bare/pull/170
• Harden bare_runtime_* bindings and add missing try by @kasperisager in https://github.com/holepunchto/bare/pull/190
• Add common threat model pitfalls by @kasperisager in https://github.com/holepunchto/bare/pull/191
• Update dependencies by @kasperisager in https://github.com/holepunchto/bare/pull/192
• Update prebuilds by @kasperisager in https://github.com/holepunchto/bare/pull/194
• Update dependencies by @kasperisager in https://github.com/holepunchto/bare/pull/195

Full Changelog: https://github.com/holepunchto/bare/compare/v1.31.2...v1.32.0