This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryFixes broken authentication in version 2.7.3 by restoring missing trial columns.
Full changelog
Critical hotfix. Anyone on 2.7.3 should upgrade immediately — 2.7.3 breaks authentication.
Fixed
-
Authentication broken on 2.7.x —
User.findById(run on every authenticated request) selectstrial_usedandtrial_started_at, but a migration ordering bug left those columns missing, so every request failed withcolumn "trial_used" does not exist(ortrial_started_at).Root cause: migration 185 added
trial_started_atand then ran anUPDATE ... trial_usedin the same block, before any migration createdtrial_used. The migration runner'sundefined_columnhandler caught the error and rolled back the whole block — including the column add — while still recording 185 as applied. The result was auserstable missing both columns. This release adds an idempotent migration that restores both columns and backfills them.
Upgrade
Pull the new image and restart — the migration applies automatically on boot:
docker compose pull && docker compose up -d
Breaking Changes
- Version 2.7.3 breaks authentication due to missing `trial_used` and `trial_started_at` columns.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]