This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+5 more
Affected surfaces
Summary
AI summaryUpdates Other changes, major, and fix across a mixed release.
Full changelog
Security
This release contains important security updates. It is advised to update as soon as possible. The vulnerability will be published in a week to give time for users to upgrade.
New features
You can now optionally enable names of public claims, if the name of the claimant is available.
- [FEATURE] Option to publicly show claimed names by @mzwoelfer in https://github.com/cmintey/wishlist/pull/627
Other changes
- Translations update from Hosted Weblate by @weblate in https://github.com/cmintey/wishlist/pull/746
- Update dependency prettier-plugin-svelte to v4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/745
- Update alpine Docker tag to v3.24.1 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/741
- Update packages by @renovate[bot] in https://github.com/cmintey/wishlist/pull/742
- Update github-actions (major) by @renovate[bot] in https://github.com/cmintey/wishlist/pull/750
- Translations update from Hosted Weblate by @weblate in https://github.com/cmintey/wishlist/pull/748
- Update zxcvbn-ts monorepo to v4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/751
- Update Node.js to b31e7a4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/749
- Update dependency @zxcvbn-ts/language-fr to v4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/744
- fix: run wishlist as PID 1 in docker by @cmintey in https://github.com/cmintey/wishlist/pull/756
- fix(security): harden password reset flow by @cmintey in https://github.com/cmintey/wishlist/pull/757
New Contributors
- @mzwoelfer made their first contribution in https://github.com/cmintey/wishlist/pull/627
Full Changelog: https://github.com/cmintey/wishlist/compare/v0.65.2...v0.66.0
Security Fixes
- Hardened password reset flow (fix(security))
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Wishlist
Wishlist application that you can share with your friends and family. `MIT` `Docker/K8S`
Related context
Related tools
Beta — feedback welcome: [email protected]