We're pleased to announce the release of D++ 10.1.6, bringing a number of new features, bug fixes, documentation improvements and build enhancements.

This version adds support for the new Discord API file type filtering option for file upload components.

This release also includes an important security improvement to the library's TLS client implementation. While the issue requires an attacker to be in a network position to intercept and modify traffic, we recommend that all users upgrade to 10.1.6 as soon as practical.

We would like to thank @EQSTLab for their professional and responsible disclosure of this issue, and @Ashthetik for independently reviewing and verifying the implemented fix. Their assistance helped ensure the issue was addressed thoroughly before release.

Further details are available in the accompanying GitHub Security Advisory.

The changelog is listed below:

Release Changelog

✨ New Features

• Added file type filtering to slashcommand attachments (#1630)
• Add nix flake (#1617)
• Add missed logic

🐞 Bug Fixes

• GHSA-2wjr-jv67-4m55 - Improper TLS Certificate Validation in DPP Client Connections
• Tighten up shell escaping to handle some edge cases (#1632)
• Race condition when destroying voice client (#1631)
• When receiving message update and cache policy set to cp_none, ensure we receive the member details and roles (#1621)
• Fix shard reconnection issue causing segfault (#1608)
• Should invalidate previous session data when got session expired/invalid error (#1614)
• Voice session reconnect (#1606)
• Fix shard reconnection issue
• Remove unused captures in example code (#1604)
• 100% busy main thread while bot is pausing audio playback in vc (#1594)
• Add protections against dataraces in socket engines, cluster timer and queues. (#1587)

📚 Documentation

• Revise vulnerability reporting instructions in SECURITY.md (#1634)

🔧 Chore

• Replace for loop with while (#1609)
• Update nlohmann/json to 3.12.0 (#1596)

📜 Miscellaneous Changes

• Restore resume logic

👷 Build/CI

• Sitemap now uses a pinned version (#1615)
• Docker image for Linux ARM64 (#1619)
• Add static library builds (#1612)

Thank you for using D++!