kacper-wolkiewicz-reef · Oct 26, 2026 · Oct 26, 2026
diff --git a/compute_horde/uv.lock b/compute_horde/uv.lock
diff --git a/compute_horde_sdk/CHANGELOG.md b/compute_horde_sdk/CHANGELOG.md
@@ -9,6 +9,25 @@ upcoming release can be found in [changelog.d](changelog.d).
 
 <!-- towncrier release notes start -->
 
+## [0.0.19](https://github.com/backend-developers-ltd/compute-horde-sdk/releases/tag/v0.0.19) - 2026-10-26
+
+### Changed
+
+- `HTTPOutputVolume` mount paths must be `/output/` followed by a canonical relative path; paths such as `/output//x`, `/output/../x` or `/output/x/` now raise `ValueError` when the job is created.
+
+### Fixed
+
+- HTTP PUT output uploads send the file in chunks of at most 64 KiB instead of one chunk per line, so a file without newlines is no longer read into memory whole.
+- Output uploads are confined to the output directory: `relative_path` of single-file uploads must be a canonical relative path with no component longer than 255 bytes, the uploader opens output files without following symlinks and rejects anything that is not a regular file or exceeds the size limit, zipped uploads leave out symlinks, other non-regular entries and empty directories, and the HTTP response of an upload receiver is cut off at the 10 MiB cap.
+- The SDK requires `certifi>=2026.10.19`, because earlier certifi releases trust the compromised eMudhra/emSign CAs.
+- When one file of a `MultiUpload` fails to upload, the uploads still in progress are cancelled before `OutputUploadFailed` is raised; uploads that already finished stay delivered.
+- Zipped output uploads accept files modified after 2107 and fail with `OutputUploadFailed` instead of an unhandled exception when a file name is not valid UTF-8. An output directory with directories nested more than 100 levels deep also fails with `OutputUploadFailed`. `MultiUpload` builds its system output zip before it sends any file.
+
+### Added
+
+- Added `compute_horde_core.untrusted_files` for reading files from, and writing files into, a directory populated by an untrusted process without following symlinks and with a size bound checked before reading.
+
+
 ## [0.0.18](https://github.com/backend-developers-ltd/compute-horde-sdk/releases/tag/v0.0.18) - 2025-12-18
 
 

diff --git a/compute_horde_sdk/changelog.d/+certifi-emudhra.fixed.md b/compute_horde_sdk/changelog.d/+certifi-emudhra.fixed.md
diff --git a/compute_horde_sdk/changelog.d/+multi-upload-cancellation.fixed.md b/compute_horde_sdk/changelog.d/+multi-upload-cancellation.fixed.md
diff --git a/compute_horde_sdk/changelog.d/+output-upload-confinement.fixed.md b/compute_horde_sdk/changelog.d/+output-upload-confinement.fixed.md
diff --git a/compute_horde_sdk/changelog.d/+output-volume-path-validation.changed.md b/compute_horde_sdk/changelog.d/+output-volume-path-validation.changed.md
diff --git a/compute_horde_sdk/changelog.d/+put-upload-chunks.fixed.md b/compute_horde_sdk/changelog.d/+put-upload-chunks.fixed.md
diff --git a/compute_horde_sdk/changelog.d/+untrusted-files.added.md b/compute_horde_sdk/changelog.d/+untrusted-files.added.md
diff --git a/compute_horde_sdk/changelog.d/+zipped-output-upload-errors.fixed.md b/compute_horde_sdk/changelog.d/+zipped-output-upload-errors.fixed.md
diff --git a/compute_horde_sdk/pyproject.toml b/compute_horde_sdk/pyproject.toml
@@ -4,7 +4,7 @@ requires-python = ">=3.10,<3.13"  # bittensor doesn't work on 3.13+
 keywords = []
 license = {text = "MIT"}
 readme = "README.md"
-version = "0.0.18"
+version = "0.0.19"
 authors = [
     {name = "Reef Technologies", email = "opensource@reef.pl"},
 ]

diff --git a/compute_horde_sdk/uv.lock b/compute_horde_sdk/uv.lock
diff --git a/executor/uv.lock b/executor/uv.lock
diff --git a/facilitator/uv.lock b/facilitator/uv.lock
diff --git a/health_probe/uv.lock b/health_probe/uv.lock
diff --git a/local_stack/uv.lock b/local_stack/uv.lock
diff --git a/miner/uv.lock b/miner/uv.lock
diff --git a/scripts/stress/uv.lock b/scripts/stress/uv.lock
diff --git a/validator/uv.lock b/validator/uv.lock