Skip to content

gocron

v1.7.0 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

cron crontab crontask distributed gin go
+6 more
gocron goland scheduler task vite vue3

Affected surfaces

breaking_upgrade auth

Summary

AI summary

Updates New Features, Others, and Bug Fixes across a mixed release.

Full changelog

⚠️ Back up your database before upgrading

This release runs migration upgradeFor170, which remaps the legacy notify_status column.
This change cannot be undone, so please back up your database before upgrading.

Changelog

New Features

  • 31659744108c5247c4bd7e6492f188e58435c166 feat(notify): multi-condition triggers and regex keyword matching
  • 932cccb2d732704867c75cc1a9b5a21b1c6f3c91 feat(secret): add encrypted secret storage with AES-GCM, masking and CRUD API
  • c3495656016bb7b892093e0a53f64579e5cd2cc2 feat(secret): add secrets management UI (list, create/edit, delete)
  • 5a59c0caf9fb0dae259525f540baccb21baa9c86 feat(secret): inject secrets as env vars into task execution and mask them in logs
  • 14b5a6f560d970f6c559d842681dd3552209a446 feat(task): support YAML import/export for tasks
  • fd456a69a7b4835abb6ba733fda32eacb827912d feat(utils): 动态检测 bash 路径并优化临时目录使用

Bug Fixes

  • c7e1ecf141f2b1cdb6794821efea9d552a02e911 fix(ai-chat): move markdown styles to unscoped block to drop :deep() lightningcss warnings
  • be830054e043afd933b1fc6ef3003be2028da5e9 fix(secret): security hardening from self-review
  • 70abf9915f29ee6b55616e76603e1f3f6698f63a fix(task-log): render host list as text to prevent stored XSS
  • 97171e3216a942fd6249a74dfb0882cbbda66c86 fix(utils): flush gbk writer before sync on windows to avoid truncated bat

Others

  • c9beee0b50feb64481350cec02efcc5ff0dcb84b Merge pull request #228 from foecmke/202607041105
  • 78e8573a7ff5ce5b0b65db42ee4d63758f3f4b05 chore(release): bump version to 1.7.0 and align secret migration to v1.7.0
  • 833fafbdcbe5b74d33fb87a352a21c712adf6e5e chore: add AI collaboration config (verify command, release skill, AGENTS.md, CLAUDE.md guardrails)
  • a4d2da0f55eec194a6844bf2d0d518a0b4e025c9 style(notify): inline conditional assignment to satisfy golangci-lint (QF1007)
  • 8cf6d1bca651b4b09045322e90ea0c2d1b1c6dae test(notify): expand keyword-regex matching cases (#222)

Breaking Changes

  • Remaps legacy `notify_status` column via irreversible migration `upgradeFor170`

Security Fixes

  • Fix(task-log): render host list as text to prevent stored XSS
  • Fix(secret): security hardening from self‑review

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track gocron

Get notified when new releases ship.

Sign up free

About gocron

distributed scheduled task management system

All releases →

Related context

Beta — feedback welcome: [email protected]