This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 19d
Developer Productivity
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
cron
crontab
crontask
distributed
gin
go
+6 more
gocron
goland
scheduler
task
vite
vue3
Affected surfaces
breaking_upgrade
auth
Summary
AI summaryUpdates New Features, Others, and Bug Fixes across a mixed release.
Full changelog
⚠️ Back up your database before upgrading
This release runs migration
upgradeFor170, which remaps the legacynotify_statuscolumn.
This change cannot be undone, so please back up your database before upgrading.
Changelog
New Features
- 31659744108c5247c4bd7e6492f188e58435c166 feat(notify): multi-condition triggers and regex keyword matching
- 932cccb2d732704867c75cc1a9b5a21b1c6f3c91 feat(secret): add encrypted secret storage with AES-GCM, masking and CRUD API
- c3495656016bb7b892093e0a53f64579e5cd2cc2 feat(secret): add secrets management UI (list, create/edit, delete)
- 5a59c0caf9fb0dae259525f540baccb21baa9c86 feat(secret): inject secrets as env vars into task execution and mask them in logs
- 14b5a6f560d970f6c559d842681dd3552209a446 feat(task): support YAML import/export for tasks
- fd456a69a7b4835abb6ba733fda32eacb827912d feat(utils): 动态检测 bash 路径并优化临时目录使用
Bug Fixes
- c7e1ecf141f2b1cdb6794821efea9d552a02e911 fix(ai-chat): move markdown styles to unscoped block to drop :deep() lightningcss warnings
- be830054e043afd933b1fc6ef3003be2028da5e9 fix(secret): security hardening from self-review
- 70abf9915f29ee6b55616e76603e1f3f6698f63a fix(task-log): render host list as text to prevent stored XSS
- 97171e3216a942fd6249a74dfb0882cbbda66c86 fix(utils): flush gbk writer before sync on windows to avoid truncated bat
Others
- c9beee0b50feb64481350cec02efcc5ff0dcb84b Merge pull request #228 from foecmke/202607041105
- 78e8573a7ff5ce5b0b65db42ee4d63758f3f4b05 chore(release): bump version to 1.7.0 and align secret migration to v1.7.0
- 833fafbdcbe5b74d33fb87a352a21c712adf6e5e chore: add AI collaboration config (verify command, release skill, AGENTS.md, CLAUDE.md guardrails)
- a4d2da0f55eec194a6844bf2d0d518a0b4e025c9 style(notify): inline conditional assignment to satisfy golangci-lint (QF1007)
- 8cf6d1bca651b4b09045322e90ea0c2d1b1c6dae test(notify): expand keyword-regex matching cases (#222)
Breaking Changes
- Remaps legacy `notify_status` column via irreversible migration `upgradeFor170`
Security Fixes
- Fix(task-log): render host list as text to prevent stored XSS
- Fix(secret): security hardening from self‑review
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]