CRITICAL SECURITY FIX
Deploy asap if affected. See GHSA-5mgr-r3cc-wcgf for details.
What's Changed
- Security Fix: Deploy JWT auth must reject dashboard-restricted tokens by @jorinvo in #427
- Set trivy notifications to HIGH by @jorinvo in #418
- Bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 in the github-actions group across 1 directory by @dependabot[bot] in #417
- Bump github.com/nrednav/cuid2 from 1.1.0 to 1.1.1 by @dependabot[bot] in #412
- Bump github.com/duckdb/duckdb-go/v2 from 2.10505.0 to 2.10506.0 by @dependabot[bot] in #413
- Bump modernc.org/sqlite from 1.59.0 to 1.60.1 by @dependabot[bot] in #414
- Bump github.com/labstack/echo/v4 from 4.15.4 to 4.16.0 by @dependabot[bot] in #415
- Bump github.com/shirou/gopsutil/v4 from 4.26.8 to 4.26.9 by @dependabot[bot] in #416
- Bump the github-actions group with 7 updates by @dependabot[bot] in #424
- Bump github.com/nats-io/nats-server/v2 from 2.15.0 to 2.15.1 by @dependabot[bot] in #422
- Bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0 by @dependabot[bot] in #421
- Update Go deps by @jorinvo in #425
Full Changelog: v0.25.1...v0.25.2