This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 10mo
Productivity & Wikis
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
api
journal
stocks
trading
Affected surfaces
auth
deps
Summary
AI summaryUpdates Vue, OpenAI, and Axios across a mixed release.
Full changelog
New Features
Core Trading Features
- Image Upload for Trades - Upload and attach images/screenshots to trade records
- Stock Split Tracking - Automatic tracking and adjustment for stock splits on open positions
- Gamification System
- Achievement system with animations
- Leaderboards for competitive tracking
- Points and badges for trading milestones
- Public Trades - Share and view public trades in the menu bar
- PostHog Analytics Integration - Enhanced analytics tracking for user behavior
Admin & User Management
- Enhanced Admin Panel
- Pagination for user management
- User search functionality
- Improved user total counts display
- Two-Factor Authentication - Can now enable/disable MFA/2FA
UI/UX Improvements
- Auto-refresh for Open Positions - Dashboard automatically updates position data
- MDI Icon Package - Added Material Design Icons for better UI
- Improved Trade Visualization - Enhanced chart with precise arrows using Finnhub API
Bug Fixes & Improvements
Critical Fixes
- SAAS Branch Merge - Complete integration of SAAS features into main branch
- Migration Fixes - Fixed multiple migration errors (057, strategy classification)
- Import Logic - Fixed execution query errors and duplicate trade handling
- User Profile - Fixed email update functionality
- Date Handling - Fixed date inconsistencies across the application
- User Deletion - Properly handle foreign key constraints and inactive users
Security & Performance
- OWASP Security Standards - Implemented security updates following OWASP guidelines
- Vulnerability Patches - Fixed multiple vulnerable packages
- Performance - Price updates now only occur during market hours
- Enhanced Logging - Added detailed logging with filtering and search capabilities
Documentation
- Deployment Guide - Updated deployment documentation with fixes
Technical Updates
Dependency Updates
- Vue: 3.5.17 → 3.5.18
- OpenAI: 5.10.0 → 5.11.0
- Axios: 1.10.0 → 1.11.0
- Cheerio: 1.1.0 → 1.1.2
- Marked: 16.0.0 → 16.1.2
- @anthropic-ai/sdk: 0.56.0 → 0.57.0
Infrastructure
- Docker Compose - Added development-specific docker-compose.dev.yaml
- Database Migrations - Added 5+ new migration files for features and fixes
Notable Improvements
- Better handling of trade executions display
- Improved duplicate trade detection for open positions
- Enhanced permissions for fetching trade images
- Fixed achievement animations and auto-loading
- Added support for log searching and filtering
Security Fixes
- Implemented OWASP security standards
- Patched multiple vulnerable packages (no specific CVEs listed)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]