This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryAdded CDN logo reference, fixed a11y language switcher behavior, and updated dependencies across deps, deps-dev, AWS SDK, React packages, i18next, TypeScript ESLint, and Vite.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add option to reference logo from CDN. Add option to reference logo from CDN. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Add documentation to microsite. Add documentation to microsite. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump react-router-dom from 7.15.1 to 7.16.0 in /website. Bump react-router-dom from 7.15.1 to 7.16.0 in /website. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump react-hook-form from 7.76.1 to 7.77.0 in /website. Bump react-hook-form from 7.76.1 to 7.77.0 in /website. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump vite from 8.0.14 to 8.0.15 in /website. Bump vite from 8.0.14 to 8.0.15 in /website. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump i18next from 26.3.0 to 26.3.1 in /website. Bump i18next from 26.3.0 to 26.3.1 in /website. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Dependency | Low |
Bump github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.41.8. Bump github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.41.8. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.102.0 to 1.102.1. Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.102.0 to 1.102.1. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump github.com/aws/aws-sdk-go-v2/config from 1.32.18 to 1.32.19. Bump github.com/aws/aws-sdk-go-v2/config from 1.32.18 to 1.32.19. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Fix a11y: language switcher opens only on click, adds aria-expanded/aria-controls. Fix a11y: language switcher opens only on click, adds aria-expanded/aria-controls. Source: llm_adapter@2026-06-04 Confidence: high |
— |
Full changelog
What's Changed
- build(deps): bump react-router-dom from 7.15.1 to 7.16.0 in /website by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3531
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.41.8 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3532
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.102.0 to 1.102.1 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3533
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.18 to 1.32.19 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3534
- build(deps): bump react-hook-form from 7.76.1 to 7.77.0 in /website by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3535
- build(deps-dev): bump vite from 8.0.14 to 8.0.15 in /website by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3536
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.41.8 to 1.41.9 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3537
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.102.1 to 1.102.2 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3538
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.19 to 1.32.20 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3539
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.102.2 to 1.103.1 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3543
- build(deps-dev): bump typescript-eslint from 8.60.0 to 8.60.1 in /website by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3547
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.20 to 1.32.22 by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3545
- build(deps-dev): bump vite from 8.0.15 to 8.0.16 in /website by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3549
- Add option to reference logo from CDN by @jhaals in https://github.com/jhaals/yopass/pull/3542
- fix(a11y): language switcher opens only on click, adds aria-expanded/aria-controls by @Copilot in https://github.com/jhaals/yopass/pull/3540
- build(deps): bump i18next from 26.3.0 to 26.3.1 in /website by @dependabot[bot] in https://github.com/jhaals/yopass/pull/3546
- Add documentation to microsite by @jhaals in https://github.com/jhaals/yopass/pull/3550
Full Changelog: https://github.com/jhaals/yopass/compare/14.0.0...14.1.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]