Poznote 6.121.0

A security fix, Claude Max support for the AI assistant, sharing fixes and a first set of tips.

🔒 Security

• Non-admin users can no longer point webhooks, AI, transcription or MCP servers and Git Sync at the server's local network (GHSA-mr2c-9992-59wx). Admins can allow local hosts in Settings > Admin Tools > Users & access > Local network access. Thanks to @benolenick!

✨ New

• Tips: the Tips page of the website is starting to fill up. https://poznote.com/tips.html

🚀 Improved

• Custom headers now work with Anthropic and OpenAI, so the AI assistant can run on the API credits of a Claude Max plan. https://poznote.com/tips.html#claude-max
• Sharing a note inside a shared folder now always says so, and offers an Edit folder share button.
• The Chrome extension links to the App passwords dialog of your instance, once Google approves the new version. Thanks to @Fwgd! #1641
• .env.template is grouped by topic and easier to read.

🐛 Fixed

• Using the browser extension no longer hides your app passwords and admin rights until you sign in again. Thanks to @byMr712! #1650
• A note opened from an unlocked shared folder no longer asks for the password again.
• The MCP per-caller authentication variables were missing from docker-compose.yml. Download the latest one if you use this feature.

❤️ Enjoying Poznote?

Thank you to everyone whose donations have allowed Poznote to keep growing and become what it is today. If you would like to support the project, it is this way: Ko-fi.

Poznote Discord community -> https://discord.gg/fuEV6uqf4N

Poznote is also available in Caliber Node and PikaPods.

If you're curious about my other projects, you can find them at timpoz.com. 😊