mirrord 3.250.0 Patches a Memory-Exhaustion Bug in HTTP/2 Frame Handling (RUSTSEC-2026-0258)

GitHub·medium signalXBlueskyLinkedInCopy link

MetalBear shipped mirrord 3.250.0 on 21 August 2026, updating the `h2` crate to a release that fixes unbounded memory use when handling empty HTTP/2 DATA frames, tracked as RUSTSEC-2026-0258. The release also adds `query_params` to Postgres db branches for connection overrides like `sslmode`, and stops the session monitor UI re-sending a telemetry opt-in event on every poll so an idle `mirrord ui` tab no longer emits a steady event stream. mirrord runs agent processes as if they were pods in a Kubernetes cluster with real env vars, DNS and network, so it sits directly in the agent-to-cluster path.