This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
Summary
AI summaryUpdates 🚀 New Features, 🐞 Bug Fixes, and 🧩 Dependencies Updates across a mixed release.
Full changelog
What's Changed
This release addresses several reported issues, and also includes the following improvements:
- Add support for Passkey passive autofill in the browser extension, preventing automatic popups from interfering with the browsing experience
- Add new
Passwordcustom field type (with generate password button)
🚀 New Features
- Show skeleton loader when opening an email modal in the web app (UX improvement) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2153
- Update default developer ports by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2167
- Improve install.sh db-export reliability and add verbose mode by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2169
- Details on how to run the backup import/export script by @vincegre in https://github.com/aliasvault/aliasvault/pull/2171
- Security autofill tightening by @AmarBego in https://github.com/aliasvault/aliasvault/pull/2160
- docs: fix some typos by @jeis4wpi in https://github.com/aliasvault/aliasvault/pull/2175
- Implement browser extension passive autofill flow for passkeys by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2178
- Add support for RS-256 public key algorithm for passkeys by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2181
- Add password custom field type by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2187
🐞 Bug Fixes
- Fix accented characters being stripped from email previews by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2155
- Include custom fields when importing a .avux or .avux file by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2164
- Fix notices during browser extension debug build by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2172
- Add browser extension force-ascii output conversion to fix load errors on Safari 18.4 and lower by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2173
- Restore 2FA and notes during credential edit popup reopen in browser extension by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2183
🧩 Dependencies Updates
- Bump esbuild from 0.25.0 to 0.28.1 in /apps/server/AliasVault.Client in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2165
- Bump dompurify from 3.4.0 to 3.4.9 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2184
- Bump the npm_and_yarn group across 5 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2185
New Contributors
- @vincegre made their first contribution in https://github.com/aliasvault/aliasvault/pull/2171
- @jeis4wpi made their first contribution in https://github.com/aliasvault/aliasvault/pull/2175
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.5...0.29.6
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About aliasvault
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
Related context
Beta — feedback welcome: [email protected]