Hi there!

We're very proud to announce that HARP 0.10 is out (changelog)!

This is a big one, with a strong focus on correctness and security:

• A dedicated HTTP cache. Caching moved to its own http_cache application, built on hishel 1.x and much closer to RFC 9111, with X-Cache and Age debugging headers.
• A hardened proxy. Requests can no longer escape the configured upstream or base path, hop-by-hop headers are dropped, and the shared cache no longer keeps private or authenticated responses.
• No more telemetry. HARP no longer sends anonymous usage statistics.
• Better project bootstrap. harp create project now generates a fully documented config.yml and a make dev task with auto-reload.

Some changes need your attention when upgrading: cache configuration moved, harp-proxy config is now harp-proxy system config, and a database migration is applied automatically on start. Please read the Important Changes section of the changelog first.

0.10.1 followed a few hours later with small CLI fixes, so make sure you install it.

Please try it out and share your feedback!

Happy proxying!

HARP Development Team