mender-artifact 4.1.1

[botantony]

Created by brew bump

---

Created with brew bump-formula-pr.

release notes

## 4.1.1 - 2025-09-17
Bug fixes


Call show-provides with sudo

(MEN-8382) (f92cc16)  by @michalkopczan


Add validation rules for validating string parameters

(MEN-8513) (ddd821f)  by @alfrunes
Artifact name and group must no more than 256 characters and contain

printable characters. Only characters from the following Unicode

categories are allowed: L, M, N, P, S and ASCII white space.
Creating artifact violating these conditions will result in an error.

Reading an existing artifact will print a warning.


Mender-artifact hangs when ssh connection fails silently

(MEN-8429) (9db4a2b)  by @michalkopczan


Mender-artifact does not reenable echo on ssh error

(MEN-8428) (15921d6)  by @michalkopczan
Original idea was to handle reenabling echo thanks to EchoSigHandler, but it was failing sometimes.

The issue was that EchoSigHandler, when finishing its execution, sends an error to errChan. We need

to wait on errChan until we get something on it - meaning that the EchoSigHandler finished,

and we can safely exit the application.
However, before my changes, if there was an error returned before reaching

if s.sigChan != nil { signal.Stop(s.sigChan) s.cancel() if err := <-s.errChan; err != nil { return err } }
So, for example, here:

_, err = recvSnapshot(f, command.Stdout) if err != nil { _ = command.Cmd.Process.Kill() return "", err }
Then we never waitied on errChan. Application was closed, EchoSigHandler never got the chance to

reenable echo (sometimes it did, sometimes it didn't), and we were left with echo disabled.
Adding a separate function that waits for errChan, and deferring it, we have the problem solved.


Split token into fixed number of parts

(SEC-1676) (0cce29b)  by @lluiscampos
Fixes CVE-2025-22868. Fix ported from

https://go-review.googlesource.com/c/oauth2/+/652155


Documentation

Make current support for only one payload in artifact v3 explicit in the documentation

(MEN-8588) (879f89d)  by @michalkopczan

View the full release notes at https://github.com/mendersoftware/mender-artifact/releases/tag/4.1.1.

---

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.