Skip to content

Plannotator

v0.8.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agents claude-code code-review codex obsidian opencode
+3 more
pi-mono plan-mode skills

Summary

AI summary

Updates https://github.com/siomporas, https://github.com/backnotprop/plannotator/pull/156, and https://github.com/j-token across a mixed release.

Full changelog

Follow @plannotator on X for updates


Missed recent releases?

| Release | Highlights |
|---------|------------|
| v0.8.0 | Open source (MIT/Apache-2.0), annotate command, self-hosted share portal, resizable panels, mermaid controls, auto-close on approval, documentation site |
| v0.7.0 | TOC sidebar, sticky actions, save to notes without approving, import teammate reviews, viewed file tracking |
| v0.6.8 | Mermaid diagram rendering, repo/branch info display |
| v0.6.7 | Quick Comment mode, type-to-comment shortcut, smart agent detection |
| v0.6.6 | OpenCode sub-agent fix, CVE-2026-22812 security update |
| v0.6.5 | Cmd+C shortcut, newline preservation, hook timeout fix |
| v0.6.4 | Cmd+Enter keyboard shortcut |
| v0.6.3 | OpenCode npm package fix, cache path fix |
| v0.6.2 | OpenCode title generation fix, WSL browser detection |


What's New in v0.8.1

A focused patch release: devcontainer users get automatic browser opening out of the box, mermaid diagrams render at full size, and the annotation toolbar no longer hijacks keystrokes from other inputs.

Devcontainer Browser Detection

Plannotator now respects the standard BROWSER environment variable as a fallback when PLANNOTATOR_BROWSER is not set. VS Code automatically sets BROWSER in devcontainers to a helper script that opens URLs on your local machine — so the plan review UI opens automatically with zero Plannotator-specific configuration. No more manually setting PLANNOTATOR_REMOTE=1 and forwarding ports just to use Plannotator inside a devcontainer.

The fallback chain is: PLANNOTATOR_BROWSER (explicit override) > BROWSER (standard convention) > system default (open / xdg-open / cmd.exe).

Mermaid Diagram Clipping Fix

Mermaid diagrams that exceeded their container were being clipped due to fixed SVG width/height attributes and an inline max-width constraint. Diagrams now render at full size within the container while preserving zoom and pan controls from v0.8.0.

Annotation Toolbar Focus Fix

The type-to-comment shortcut — where you start typing in the toolbar's menu step to auto-transition into a comment — was capturing keystrokes globally. If you clicked the global comment textarea (or any other input) while the toolbar was open, your keystrokes would get swallowed by the toolbar instead of reaching the input you were typing in. The toolbar now checks whether the active element is an input, textarea, select, or contenteditable before intercepting keys. Also adds IME composition safety for international keyboard input.


Install / Update

macOS / Linux:

curl -fsSL https://plannotator.ai/install.sh | bash

Windows:

irm https://plannotator.ai/install.ps1 | iex

Claude Code Plugin: Run /plugin in Claude Code, find plannotator, and click "Update now".

OpenCode: Clear cache and restart:

rm -rf ~/.bun/install/cache/@plannotator

Then in opencode.json:

{
  "plugin": ["@plannotator/opencode@latest"]
}

What's Changed

  • feat: use BROWSER env var as fallback for opening UI by @backnotprop in https://github.com/backnotprop/plannotator/pull/153
  • fix: mermaid diagrams clipped due to fixed SVG dimensions by @j-token in https://github.com/backnotprop/plannotator/pull/156
  • fix(ui): prevent annotation toolbar from stealing global comment focus by @blue-poolyum in https://github.com/backnotprop/plannotator/pull/157

New Contributors

  • @blue-poolyum made their first contribution in https://github.com/backnotprop/plannotator/pull/157

Full Changelog: https://github.com/backnotprop/plannotator/compare/v0.8.0...v0.8.1

Security Fixes

  • CVE-2026-22812

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Plannotator

Get notified when new releases ship.

Sign up free

About Plannotator

All releases →

Related context

Beta — feedback welcome: [email protected]