Ovumcy v0.8.4

Release date: 2026-03-29

Highlights

Public patch release that supersedes v0.8.3.
Reissues the same release-packaging content on the correct release commit after the v0.8.3 tag was created from the previous main revision.

v0.8.4 keeps the final CodeQL-driven hardening for the local OIDC browser-test runtime helper: the helper now uses a constant HTML bridge page and a one-time JSON payload endpoint instead of reflected callback markup.
The release packaging was revalidated with git diff --check, docker compose config for the supported release stacks, and a fully green main workflow set (CodeQL, CI, Security, Docker Image) before tagging the release commit.
The runtime feature set is unchanged from the fully green main branch behind the v0.8.4 release commit.

No new database migration is introduced beyond the schema changes already shipped in v0.8.0. If you are upgrading directly from v0.7.2 or earlier, Ovumcy will still apply schema version 016_oidc_logout_states.
Tagged images publish under ghcr.io/ovumcy/ovumcy-web:v0.8.4.
Existing deployments can upgrade in place and pin OVUMCY_IMAGE=ghcr.io/ovumcy/ovumcy-web:v0.8.4 if they do not want to track future tags manually.