This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Pins `packageManager` for pnpm-scaffolded sites to ensure recent pnpm version usage. Pins `packageManager` for pnpm-scaffolded sites to ensure recent pnpm version usage. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Refactor | Low |
Strips `packageManager` field for npm, yarn, or bun selections. Strips `packageManager` field for npm, yarn, or bun selections. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
Full changelog
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About emdash
All releases →Related context
Earlier breaking changes
- [email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
- [email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
- v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
- v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
- v@emdash-cms/[email protected] Menu and menu-item API responses now camelCase, breaking clients expecting snake_case keys.
Beta — feedback welcome: [email protected]