This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+12 more
Affected surfaces
Summary
AI summaryUpdates deps, ci, and chore across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Migrate CI from release-please to release-drafter. Migrate CI from release-please to release-drafter. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Bump frontend‑deps group in /frontend with 7 updates. Bump frontend‑deps group in /frontend with 7 updates. Source: llm_adapter@2026-06-04 Confidence: low |
— |
| Dependency | Low |
Bump roda from 3.103.0 to 3.104.0 in rubygems group. Bump roda from 3.103.0 to 3.104.0 in rubygems group. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump faraday from 2.14.1 to 2.14.2 in rubygems group. Bump faraday from 2.14.1 to 2.14.2 in rubygems group. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump puma from 8.0.1 to 8.0.2 in rubygems group. Bump puma from 8.0.1 to 8.0.2 in rubygems group. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fix bump-version workflow issues in CI. Fix bump-version workflow issues in CI. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Bypass obsolete RELEASE_PLEASE_TOKEN in bump‑version workflow. Bypass obsolete RELEASE_PLEASE_TOKEN in bump‑version workflow. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Low |
Setup frontend package.json for Dependabot CI. Setup frontend package.json for Dependabot CI. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Low |
Bump version to v1.3.1. Bump version to v1.3.1. Source: llm_adapter@2026-06-04 Confidence: low |
— |
Full changelog
What's Changed
- chore(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/981
- chore(deps): bump roda from 3.103.0 to 3.104.0 in the rubygems group by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/983
- chore(deps): bump faraday from 2.14.1 to 2.14.2 by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/985
- ci(dependabot): setup frontend package.json by @gildesmarais in https://github.com/html2rss/html2rss-web/pull/988
- chore(deps): bump zeitwerk from 2.7.5 to 2.8.0 in the rubygems group across 1 directory by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/987
- chore(deps): bump the frontend-deps group in /frontend with 16 updates by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/989
- chore(deps): bump zeitwerk from 2.8.0 to 2.8.1 in the rubygems group by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/991
- chore(deps): bump zeitwerk from 2.8.1 to 2.8.2 in the rubygems group by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/993
- chore(deps): bump puma from 8.0.1 to 8.0.2 in the rubygems group by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/995
- feat(deps): bump the frontend-deps group in /frontend with 7 updates by @dependabot[bot] in https://github.com/html2rss/html2rss-web/pull/997
- chore(ci): migrate from release-please to release-drafter by @gildesmarais in https://github.com/html2rss/html2rss-web/pull/998
- chore(ci): fix bump-version workflow issues by @gildesmarais in https://github.com/html2rss/html2rss-web/pull/999
- chore: bypass obsolete RELEASE_PLEASE_TOKEN in bump-version workflow by @gildesmarais in https://github.com/html2rss/html2rss-web/pull/1000
- chore: bump version to v1.3.1 by @gildesmarais in https://github.com/html2rss/html2rss-web/pull/1004
Full Changelog: https://github.com/html2rss/html2rss-web/compare/v1.3.0...v1.3.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]