Skip to content

Wishlist

v0.66.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 18d Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

christmas family friends gift gifts holday
+5 more
holidays registry self-hosted wish wishlist

Affected surfaces

auth

Summary

AI summary

Updates Other changes, major, and fix across a mixed release.

Full changelog

Security

This release contains important security updates. It is advised to update as soon as possible. The vulnerability will be published in a week to give time for users to upgrade.

New features

You can now optionally enable names of public claims, if the name of the claimant is available.

  • [FEATURE] Option to publicly show claimed names by @mzwoelfer in https://github.com/cmintey/wishlist/pull/627

Other changes

  • Translations update from Hosted Weblate by @weblate in https://github.com/cmintey/wishlist/pull/746
  • Update dependency prettier-plugin-svelte to v4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/745
  • Update alpine Docker tag to v3.24.1 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/741
  • Update packages by @renovate[bot] in https://github.com/cmintey/wishlist/pull/742
  • Update github-actions (major) by @renovate[bot] in https://github.com/cmintey/wishlist/pull/750
  • Translations update from Hosted Weblate by @weblate in https://github.com/cmintey/wishlist/pull/748
  • Update zxcvbn-ts monorepo to v4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/751
  • Update Node.js to b31e7a4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/749
  • Update dependency @zxcvbn-ts/language-fr to v4 by @renovate[bot] in https://github.com/cmintey/wishlist/pull/744
  • fix: run wishlist as PID 1 in docker by @cmintey in https://github.com/cmintey/wishlist/pull/756
  • fix(security): harden password reset flow by @cmintey in https://github.com/cmintey/wishlist/pull/757

New Contributors

  • @mzwoelfer made their first contribution in https://github.com/cmintey/wishlist/pull/627

Full Changelog: https://github.com/cmintey/wishlist/compare/v0.65.2...v0.66.0

Security Fixes

  • Hardened password reset flow (fix(security))

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Wishlist

Get notified when new releases ship.

Sign up free

About Wishlist

Wishlist application that you can share with your friends and family. `MIT` `Docker/K8S`

All releases →

Related context

Beta — feedback welcome: [email protected]