Skip to content

BetterDB-inc/monitor

v0.31.0 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 1d Monitoring & Metrics
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Topics

prometheus monitoring obsevability redis valkey

Affected surfaces

deps

Summary

AI summary

Updates ⬆ Upgrade notes, deps, and ✨ Changes across a mixed release.

Full changelog

Frontend telemetry is now attributable to a release, plus security dependency updates.

✨ Changes

  • Frontend events tagged with the monitor version (#339). Events the web app sends to PostHog now carry the release version as a super property — matching the server-side events — so frontend usage and funnels can be attributed to a specific build. Baked in at build time from the existing APP_VERSION build-arg; no config change, falls back to unknown in local dev.
  • Security dependency updates. @fastify/static 9.1.1 → 10.1.2 (#340) and ws 8.20.1 → 8.21.0 (#342) in the API, plus a transitive protobufjs 7.6.3 → 7.6.5 (#325).

⬆ Upgrade notes

  • Fully backwards compatible; no config or schema changes.
  • Docker: betterdb/monitor:0.31.0

Full Changelog: https://github.com/BetterDB-inc/monitor/compare/v0.30.0...v0.31.0

What's Changed

  • chore(telemetry): restore delivery visibility, guard key injection, fix serverless by @jamby77 in https://github.com/BetterDB-inc/monitor/pull/320
  • chore(deps): bump setuptools from 81.0.0 to 83.0.0 in /packages/cache-benchmark by @dependabot[bot] in https://github.com/BetterDB-inc/monitor/pull/328
  • chore(deps): bump protobufjs from 7.6.3 to 7.6.5 by @dependabot[bot] in https://github.com/BetterDB-inc/monitor/pull/325
  • chore(deps): bump torch from 2.12.0 to 2.13.0 in /packages/cache-benchmark by @dependabot[bot] in https://github.com/BetterDB-inc/monitor/pull/323
  • feat(web): tag frontend PostHog events with the monitor version by @KIvanow in https://github.com/BetterDB-inc/monitor/pull/339
  • chore(deps): bump @fastify/static from 9.1.1 to 10.1.2 by @dependabot[bot] in https://github.com/BetterDB-inc/monitor/pull/340
  • chore(deps): bump ws from 8.20.1 to 8.21.0 by @dependabot[bot] in https://github.com/BetterDB-inc/monitor/pull/342
  • chore(deps): bump aiohttp from 3.14.0 to 3.14.1 in /packages/cache-benchmark by @dependabot[bot] in https://github.com/BetterDB-inc/monitor/pull/341

Full Changelog: https://github.com/BetterDB-inc/monitor/compare/v0.30.0...v0.31.0

Security Fixes

  • @fastify/static upgraded from 9.1.1 to 10.1.2 (CVE details not provided)
  • ws upgraded from 8.20.1 to 8.21.0 (CVE details not provided)
  • protobufjs transitive dependency upgraded from 7.6.3 to 7.6.5 (CVE details not provided)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track BetterDB-inc/monitor

Get notified when new releases ship.

Sign up free

About BetterDB-inc/monitor

Valkey-first observability with Redis compatibility. Query real-time metrics, analyze slow commands, detect hot keys, and investigate performance issues directly from AI coding assistants.

All releases →

Related context

Earlier breaking changes

  • vagent-cache-py-v0.7.0 Cache keys changed for tool-using requests on the LlamaIndex adapter; existing cached entries will miss once after upgrade.
  • vagent-cache-v0.7.0 Cache keys for tool-using requests changed on Vercel and LlamaIndex adapters; existing entries become one-time misses.
  • vagent-v1.5.0 TLS is now mandatory; agent exits with error if `--valkey-tls true` is not set for IAM auth mode.

Beta — feedback welcome: [email protected]