This release includes 1 breaking change for platform teams planning a safe upgrade.
Published 2mo
Communication & Email
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
chat
communication
gdpr-compliant
privacy-first
screensharing
video-calls
+1 more
voice-calls
Affected surfaces
auth
rbac
Summary
AI summaryUpdates @hmans, Other, and rbac across a mixed release.
Full changelog
Changelog
Features
- 8bb28ad19768c05a7fe35594f4d2835d6a7c0eee: feat(frontend): resizable secondary sidebar and members pane (#403) (@hmans)
- 33f2220d52eb4ad2d51bde2da8147ff254c68663: feat(rbac): collapse dual-tier RBAC into unified SERVER_RBAC (#357) (#398) (@hmans)
Bug Fixes
- c13d95360fe42783251553a87cbb83c82ae04436: fix(auth): cap password length at 128 bytes (#405) (@hmans)
- 1e1ae8cb6bd8a73ce22875b2d47a5988b50ea5ca: fix(frontend): MOTD reflects the currently-viewed server (#407) (@hmans)
- aab1b7656f25da0896e18a70d14f5a6e56a17236: fix(frontend): prevent embed/attachment overflow on mobile viewports (#410) (@hmans)
Other
- 1ebe2a2adf6b735c275d5d18504ae37424bd6d59: refactor(frontend): retire DM_SPACE_ID-as-discriminator leftovers (#408) (@hmans)
- eadd30beacffc6ecc76256c07ef1735e6fcc02d4: refactor(rbac): drop room-permission wrappers, move auth to resolvers (#412) (@hmans)
- da8f924ea726953d5038de8009794deeb6e716c8: refactor(rbac): drop space-variant role/permission method pairs (#411) (@hmans)
- 045fd0b7e0cde9123dc1546986cd621067e5cbfd: refactor(rbac): drop vestigial spaceID params and IsSpaceAdmin wrapper (#413) (@hmans)
- 6d20b6743620f4036128b7fe98771385b9b5833e: refactor(rbac): finish dual-tier consolidation — drop isInstanceRole, dual mutations, instance- prefix (#404) (@hmans)
- d211a2a42ea19ce8dca865efdd1b7f272a32f250: refactor(rbac): retire vestigial space.* permissions (#402) (@hmans)
Released by GoReleaser.
Breaking Changes
- Removed dual‑tier RBAC model; all role/permission logic consolidated into SERVER_RBAC (drop room‑permission wrappers, space‑variant methods, vestigial permissions).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]