This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
ReleasePort's take
Light signalVersion 4.1.0 updates dependencies to Node 26 and upgrades several backend libraries; a smoke‑test configuration change removes an unused target.
Why it matters: Node is bumped from version 25 to 26 across CI pipelines and frontend containers, requiring all build configurations to reference the new runtime before deployment.
Summary
AI summaryUpdates fix, ci, and chore across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Bump version to 4.1.0 (release bump). Bump version to 4.1.0 (release bump). Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Dependency | Low |
Migrate from yarn to npm for Node 26 compatibility. Migrate from yarn to npm for Node 26 compatibility. Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Dependency | Low |
Update Node version references from 25 to 26 in CI. Update Node version references from 25 to 26 in CI. Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Dependency | Low |
Bump uvicorn from 0.46.0 to 0.49.0 in backend. Bump uvicorn from 0.46.0 to 0.49.0 in backend. Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Dependency | Low |
Bump litestar from 2.21.1 to 2.23.0 in backend. Bump litestar from 2.21.1 to 2.23.0 in backend. Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Dependency | Low |
Bump pydantic from 2.12.5 to 2.13.3 in backend. Bump pydantic from 2.12.5 to 2.13.3 in backend. Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Dependency | Low |
Bump gunicorn from 25.1.0 to 26.0.0 in backend. Bump gunicorn from 25.1.0 to 26.0.0 in backend. Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Dependency | Low |
Bump node from 25‑alpine3.22 to 26‑alpine3.22 in frontend Docker image. Bump node from 25‑alpine3.22 to 26‑alpine3.22 in frontend Docker image. Source: llm_adapter@2026-06-06 Confidence: high |
— |
| Bugfix | Medium |
Remove target in smoke compose configuration. Remove target in smoke compose configuration. Source: llm_adapter@2026-06-06 Confidence: high |
— |
Full changelog
What's Changed
- [api] bump pytest-cov from 7.0.0 to 7.1.0 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/439
- [api] bump pytest from 9.0.2 to 9.0.3 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/441
- [web] bump follow-redirects from 1.15.11 to 1.16.0 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/442
- [web] bump css-loader from 7.1.2 to 7.1.4 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/433
- [api] bump pygments from 2.19.1 to 2.20.0 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/431
- [web] bump postcss from 8.5.6 to 8.5.13 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/445
- [web] bump jest-environment-jsdom from 30.2.0 to 30.3.0 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/432
- [web] bump webpack-cli from 6.0.1 to 7.0.2 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/434
- [api] bump tomli from 2.4.0 to 2.4.1 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/438
- [web] bump fast-uri from 3.1.0 to 3.1.2 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/446
- [api] bump idna from 3.10 to 3.15 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/448
- [api] bump uvicorn from 0.42.0 to 0.46.0 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/443
- [web] bump lodash from 4.17.23 to 4.18.1 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/440
- [web] bump webpack-dev-server from 5.2.3 to 5.2.4 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/449
- [api] bump pydantic from 2.12.5 to 2.13.3 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/444
- [api] bump gunicorn from 25.1.0 to 26.0.0 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/437
- [web] bump copy-webpack-plugin from 13.0.1 to 14.0.0 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/435
- Smoke testing by @dsgnr in https://github.com/dsgnr/portchecker.io/pull/451
- fix: remove target in smoke compose by @dsgnr in https://github.com/dsgnr/portchecker.io/pull/459
- [web] bump jest-environment-jsdom from 30.3.0 to 30.4.1 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/456
- [web] bump eslint from 10.0.2 to 10.4.1 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/452
- [web] bump webpack from 5.105.4 to 5.107.2 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/454
- [web] bump jest from 30.2.0 to 30.4.2 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/458
- [api] bump uvicorn from 0.46.0 to 0.49.0 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/455
- [api] bump litestar from 2.21.1 to 2.23.0 in /backend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/453
- [web] bump css-minimizer-webpack-plugin from 7.0.4 to 8.0.0 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/457
- build!: migrate from yarn to npm for Node 26 compatibility by @dsgnr in https://github.com/dsgnr/portchecker.io/pull/460
- [web] bump lodash from 4.17.23 to 4.18.1 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/461
- [web] bump picomatch from 2.3.1 to 2.3.2 in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/463
- [docker] bump node from 25-alpine3.22 to 26-alpine3.22 in /frontend by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/450
- [web] bump qs and express in /frontend/web by @dependabot[bot] in https://github.com/dsgnr/portchecker.io/pull/462
- ci: update Node version references from 25 to 26 by @dsgnr in https://github.com/dsgnr/portchecker.io/pull/464
- chore: bump version to 4.1.0 by @dsgnr in https://github.com/dsgnr/portchecker.io/pull/465
Full Changelog: https://github.com/dsgnr/portchecker.io/compare/v4.0.1...v4.1.0
Breaking Changes
- Remove `target` from smoke compose configuration (fix).
- Migrate from Yarn to npm for Node 26 compatibility (build!).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About portchecker.io
portchecker.io is a free online utility to check the port status of a given hostname or IP address.
Related context
Related tools
Beta — feedback welcome: [email protected]