Security
This release contains fixes for a number of security related issues as well as patching some upstream CVEs in NodeJS. For details see https://nodejs.org/en/blog/vulnerability/october-2026-security-releases.
It is advised to update to this latest version as soon as you are able.
Notable changes
- List managers can add items to a managed list if suggestions are not enabled (#819)
- Allows adding items you own/that you created on your own list to lists you manage (#819)
- List owners can edit items that were put on your list by a manager (#819)
- List managers can edit all items on a list that they manage (#819)
- Lists where self-claims are enabled are now reactive and have the ability to sort and filter by claim status (#815)
Other changes
- Update dependency @humanspeak/svelte-markdown to v2 by @renovate[bot] in #811
- Update dependency @types/node to ^24.19.2 by @renovate[bot] in #809
- fix: validate list ownership on modifying APIs by @cmintey in #817
- Translations update from Hosted Weblate by @weblate in #807
- fix: remove reset token exposure by @cmintey in #818
- Update dependency vite-plugin-pwa to v2 by @renovate[bot] in #821
- Update packages by @renovate[bot] in #810
- fix: use node for entrypoint by @cmintey in #823
- fix: dev logger by @cmintey in #825
- Translations update from Hosted Weblate by @weblate in #828
- Update Node.js to 55fb5f5 by @renovate[bot] in #829
- Update alpine Docker tag to v3.24.3 by @renovate[bot] in #831
- fix: clear user sessions by @cmintey in #832
Full Changelog: v0.68.0...v0.69.0