This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+11 more
Summary
AI summaryAdded four zero‑auth scan providers, expanding adapters from 41 to 45.
Full changelog
[1.87.0] — 2026-07-04
4 new zero-auth scan providers (parent career-ops v1.16.0 parity). The scanner registry grows 41 → 45 adapters (40 EN + 5 RU) — all public, no-auth, host-pinned, redirect:'error' (SSRF-safe), each with a CI-isolated test:
- Get on Board (
getonbrd) — board-wide public JSON:API (LATAM/remote tech), provider-selected, paginated.server/lib/sources/getonbrd.mjs. - Amazon (
amazon) —amazon.jobspublic search JSON, host-detected orprovider: amazon, offset-paginated.server/lib/sources/amazon.mjs. - Avature (
avature) — per-tenant*.avature.netATS, HTML-parsed, host-detected orprovider: avature.server/lib/sources/avature.mjs. - SAP SuccessFactors (
successfactors) — per-tenant RMK tile list (*.successfactors.eu/.com,jobs2web.com), HTML-parsed.server/lib/sources/successfactors.mjs.
Each ships a sources/<slug>.mjs (auto-discovered meta → #/scan dropdown) and a portals/adapters/<slug>.mjs in ALL_ADAPTERS (the two-registry rule) + tests/sources-<slug>.test.mjs. The ALL_ADAPTERS count + sorted-id and /api/scan/sources EN-set assertions bumped 36→40; GET /api/scan/sources now lists 45.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Career Ops UI
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]