🎉 Version 2.6.1 - Login & Pattern Security Fixes, Next.js & Node.js Security Updates
Security Fixes
- 694afab Lock password logins per account across client addresses (GHSA-p7gp-9g8q-34hg, reported by @Michael-Zebratrix)
- 5b47bb7 Check e-mail addresses in linear time (GHSA-ffv4-xcjx-88v3)
- 0621e84 Evaluate user-supplied patterns with a linear-time engine (GHSA-9949-g2m5-8hqf, reported by @Michael-Zebratrix)
- 2b79399 Keep credentials off redirects to another origin (GHSA-5r2m-6f25-5fr2, reported by @Michael-Zebratrix)
User Experience & Reliability
- 32308be Record the app version and remove stale temporary data files at start
- 56bbb9b Look up application updates by repository ID
Dependencies
- caa6a31 Update dependencies, including Next.js security fixes (GHSA-p3m5-59mp-jv5r)
- dc49cf5 Update dependencies and restore auth compatibility
- 322feb7 Update frontend dependencies
- e5368ff Update Vitest to version 5
- Docker image built on Node.js 24.22.1 (CVE-2026-111497)
Maintenance
- 7ea4b7f chore: release version 2.6.1
Acknowledgements
- Thanks to @Michael-Zebratrix for finding and responsibly reporting three of these vulnerabilities.
Full Changelog: v2.6.0...v2.6.1