This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryFixed websocket URL construction and added Korean translations.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Align pnpm overrides with bumped deps and resolve next alerts. Align pnpm overrides with bumped deps and resolve next alerts. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Low |
Add Korean (ko-KR) translation. Add Korean (ko-KR) translation. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @hono/node-server from 1.19.13 to 2.0.2 in /apps/api. Upgrade @hono/node-server from 1.19.13 to 2.0.2 in /apps/api. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @better-auth/api-key from 1.6.9 to 1.6.11 in /apps/api. Upgrade @better-auth/api-key from 1.6.9 to 1.6.11 in /apps/api. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @hono/node-ws from 1.3.0 to 1.3.1 in /apps/api. Upgrade @hono/node-ws from 1.3.0 to 1.3.1 in /apps/api. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @tiptap/extension-underline from 3.22.5 to 3.23.1 in /apps/web. Upgrade @tiptap/extension-underline from 3.22.5 to 3.23.1 in /apps/web. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @tiptap/extension-placeholder from 3.22.5 to 3.23.1 in /apps/web. Upgrade @tiptap/extension-placeholder from 3.22.5 to 3.23.1 in /apps/web. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @better-auth/drizzle-adapter from 1.6.9 to 1.6.11 in /apps/api. Upgrade @better-auth/drizzle-adapter from 1.6.9 to 1.6.11 in /apps/api. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @types/node from 25.2.3 to 25.8.0 in /packages/email. Upgrade @types/node from 25.2.3 to 25.8.0 in /packages/email. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Upgrade @tailwindcss/vite from 4.2.1 to 4.3.0 in /apps/web. Upgrade @tailwindcss/vite from 4.2.1 to 4.3.0 in /apps/web. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Low |
Bump npm_and_yarn group across 2 directories with 3 updates. Bump npm_and_yarn group across 2 directories with 3 updates. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Add missing foreign key indexes in database. Add missing foreign key indexes in database. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Emit task.status_changed for git webhook status updates in API. Emit task.status_changed for git webhook status updates in API. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Low |
Use correct websocket path in web module. Use correct websocket path in web module. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Low |
Properly construct WS URL. Properly construct WS URL. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Low |
Fix project backlog filter priority items and assignee styles. Fix project backlog filter priority items and assignee styles. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Low |
Remove duplicate import tasks modal close button. Remove duplicate import tasks modal close button. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Other | Low |
Upgrade vitest from 4.1.2 to 4.1.6 in /packages/libs. Upgrade vitest from 4.1.2 to 4.1.6 in /packages/libs. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Low |
Upgrade react from 19.1.0 to 19.2.6 in /packages/libs. Upgrade react from 19.1.0 to 19.2.6 in /packages/libs. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Low |
Upgrade hono from 4.12.14 to 4.12.19 in /packages/libs. Upgrade hono from 4.12.14 to 4.12.19 in /packages/libs. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Low |
Upgrade jsdom from 29.0.1 to 29.1.1 in /apps/web. Upgrade jsdom from 29.0.1 to 29.1.1 in /apps/web. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
Full changelog
What's Changed
- fix(web): Use correct websocket path by @Lumpiasty in https://github.com/usekaneo/kaneo/pull/1228
- fix: properly construct WS URL by @tiran133 in https://github.com/usekaneo/kaneo/pull/1254
- fix(web): project backlog filter priority items and assignee styles by @nimone in https://github.com/usekaneo/kaneo/pull/1260
- fix(db): add missing foreign key indexes by @randoneering in https://github.com/usekaneo/kaneo/pull/1226
- chore(deps): bump the npm_and_yarn group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1259
- chore(deps): bump @hono/node-server from 1.19.13 to 2.0.2 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1239
- chore(deps-dev): bump jsdom from 29.0.1 to 29.1.1 in /apps/web by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1236
- chore(deps): bump @better-auth/api-key from 1.6.9 to 1.6.11 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1251
- chore(deps): bump @hono/node-ws from 1.3.0 to 1.3.1 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1242
- chore(deps): bump @tiptap/extension-underline from 3.22.5 to 3.23.1 in /apps/web by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1246
- chore(deps): bump @tiptap/extension-placeholder from 3.22.5 to 3.23.1 in /apps/web by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1240
- chore(deps-dev): bump vitest from 4.1.2 to 4.1.6 in /packages/libs by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1269
- chore(deps): bump @better-auth/drizzle-adapter from 1.6.9 to 1.6.11 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1249
- chore(deps): bump @types/node from 25.2.3 to 25.8.0 in /packages/email by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1267
- chore(deps-dev): bump react from 19.1.0 to 19.2.6 in /packages/libs by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1238
- chore(deps-dev): bump hono from 4.12.14 to 4.12.19 in /packages/libs by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1266
- chore(deps): bump @tailwindcss/vite from 4.2.1 to 4.3.0 in /apps/web by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1250
- chore(security): align pnpm overrides with bumped deps and resolve next alerts by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1271
- fix: remove duplicate import tasks modal close button by @azula9713 in https://github.com/usekaneo/kaneo/pull/1264
- fix(api): emit task.status_changed for git webhook status updates by @tinsever in https://github.com/usekaneo/kaneo/pull/1263
- feat(i18n): add Korean (ko-KR) translation by @fvoci in https://github.com/usekaneo/kaneo/pull/1229
- fix(api): resolve issue #1231 by @randoneering in https://github.com/usekaneo/kaneo/pull/1257
New Contributors
- @Lumpiasty made their first contribution in https://github.com/usekaneo/kaneo/pull/1228
- @nimone made their first contribution in https://github.com/usekaneo/kaneo/pull/1260
- @azula9713 made their first contribution in https://github.com/usekaneo/kaneo/pull/1264
- @fvoci made their first contribution in https://github.com/usekaneo/kaneo/pull/1229
Full Changelog: https://github.com/usekaneo/kaneo/compare/v2.7.2...v2.7.3
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About kaneo
All you need. Nothing you don't. Open source project management that works for you, not against you.
Beta — feedback welcome: [email protected]