This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
AI Agents & Assistants
✓ No known CVEs patched
This release patches 1 known CVE
Topics
ai
ai-agent
anthropic
ats
automation
beginner-friendly
+11 more
career
careerops
claude
claude-code
cli
go
interview-prep
job-application
job-hunting
job-search
resume
Affected surfaces
rce_ssrf
Summary
AI summaryUpdates 1.13.0, Bug Fixes, and 2026-06-25 across a mixed release.
Full changelog
1.13.0 (2026-06-25)
Features
- arbeitsagentur: config-driven remoteMatch + server-side homeoffice filter (#1189) (a463308)
- batch: add --skip-pdf flag to batch-runner.sh (#1182) (256a289)
- dashboard: add in-viewer status picker overlay (#1195) (cc53485)
- dashboard: customizable columns with column picker (#979) (9d1404f)
- dashboard: recognize EUR/GBP/CHF pay and international cities in pipeline derive (#1157) (a1c7ce2)
- liveness: zero-token ATS API check before Playwright (closes #574) (#1181) (44f9e64)
- modes: add Polish (pl) locale modes (#1129) (51711b3)
- modes: optional voice-dna.md writing guardrail (#998) (018eb0f)
- portals: add verify-portals.mjs ATS slug validator (#1016) (7aeb016)
- providers: add BambooHR provider (#1141) (39bb6b2)
- providers: add Breezy HR scanner provider (#1185) (6249bcb)
- scan: add --json output, --include-undated, and --shuffle to scan-ats-full (#1199) (12206f7)
- tracker: add
delete --num Nto remove an application row safely (#1200) (a644392)
Bug Fixes
- auto-create data/pipeline.md and harden Playwright doctor check (#1059) (188cf76)
- batch: harden status score handling (#1133) (fbce3f2)
- batch: use awk instead of bc for score math (#735) (afa74c2)
- contract: expand interview-prep/* coverage in DATA_CONTRACT (#1060) (d19db79)
- dashboard: rewrite only the Status cell on status update (#1186) (b1cba0f)
- images not rendering in PDF output due to about:blank origin (#1165) (81752df)
- normalize report links from data files (#1134) (6ae011f)
- providers: harden lever/ashby/workday against SSRF via redirect (950aad5)
- recruitee: keep offer URLs on tenant custom domains (#1116) (7c7fd99)
- scan: guard title-filter keyword normalization against malformed config (#1187) (68c0cdf)
- scan: match short acronym title-filter keywords on word boundaries (#1102) (424f864)
- template: emit mailto:/tel: links for email and phone in CV header (#1167) (7a4b3b6)
- templates: disable fi/fl ligatures for ATS-clean PDF text extraction (#1175) (#1176) (51ef241)
Security Fixes
- Hardened lever, Ashby, Workday providers against SSRF via redirect
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About career-ops
AI-powered job search system built on Claude Code. 14 skill modes, Go dashboard, PDF generation, batch processing.
Related context
Related tools
Beta — feedback welcome: [email protected]