⚠️ Breaking Changes
- Node.js 22.19.0 or later is now required. Node.js 18 and 20 are no longer supported. Check your version with
node --versionand upgrade before updating the proxy. - Core dependencies upgraded to new major versions: Express 5, undici 8, and better-sqlite3 13. The proxy's API behaves the same, but if you run it from source or patch it, see the Express 5 and undici 8 migration notes. better-sqlite3 13 also adds support for Node.js 26.
What's New
- Security fixes:
proxy-addrupgraded to 2.0.8 (CVE-2026-90711), andnpm auditnow reports 0 vulnerabilities. Updated packages include undici, express, body-parser, qs, path-to-regexp and postcss. - Web UI styling fixed: the compiled stylesheet was out of date, so some red and amber warning and error styles in the Accounts and Settings views showed up unstyled. They display correctly again.
Contributors
Thanks to @anupamme for the proxy-addr security upgrade for CVE-2026-90711 (#407)!