Skip to content

kaneo

v2.7.8 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 27d Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

hono issue-management issue-tracker jira-alternative kanban linear-alternative
+4 more
project-management react self-hosted typescript

Affected surfaces

deps

Summary

AI summary

Broad release touches deps, deps-dev, helm, and fix.

Full changelog

What's Changed

  • feat(helm): publishing helm chart to GHCR by @randoneering in https://github.com/usekaneo/kaneo/pull/1306
  • fix(helm): define KANEO_POSTGRES_PASSWORD before DATABASE_URL by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1309
  • chore(helm): bump chart to 0.4.2 by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1310
  • chore(deps): bump hono from 4.12.19 to 4.12.23 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1290
  • chore(deps-dev): bump hono from 4.12.19 to 4.12.23 in /packages/libs by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1307
  • chore(deps-dev): bump turbo from 2.7.2 to 2.9.14 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1302
  • chore(deps): bump @hono/node-server from 1.19.13 to 2.0.3 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1292
  • chore(dependabot): group non-major npm updates per package by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1311
  • fix(deps): allow @hono/node-server v2 so the #1292 upgrade takes effect by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1313
  • chore(security): override transitive deps to patched versions by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1312
  • feat: custom OAuth auto login, allow disabling the Login Form by @tiran133 in https://github.com/usekaneo/kaneo/pull/1279
  • fix(comment): Improve Github comment formatting by @Asynchronite in https://github.com/usekaneo/kaneo/pull/1303
  • docs(charts): improve README with missing configuration and troubleshooting guidance by @randoneering in https://github.com/usekaneo/kaneo/pull/1314
  • fix: add enabled guard to useGetTask by @Petr0611 in https://github.com/usekaneo/kaneo/pull/1320
  • feat(mcp): add task-relation and label-delete tools by @dmtrTm in https://github.com/usekaneo/kaneo/pull/1341
  • fix(bug): fix for s3 files using old api URL by @randoneering in https://github.com/usekaneo/kaneo/pull/1332
  • chore(deps): bump nodemailer from 8.0.7 to 9.0.1 by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1335
  • chore(deps-dev): bump vite from 7.3.2 to 7.3.5 by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1337
  • ci: add nightly builds by @tinsever in https://github.com/usekaneo/kaneo/pull/1347
  • fix(docs): resolves bug 1346 by @randoneering in https://github.com/usekaneo/kaneo/pull/1350
  • feat: support AWS IAM roles for S3 storage by @nitin-bhadauria in https://github.com/usekaneo/kaneo/pull/1342
  • feat(comments): allow users to delete their own comments by @shockalotti in https://github.com/usekaneo/kaneo/pull/1322
  • fix: use custom column names in webhook status reports by @krauzX in https://github.com/usekaneo/kaneo/pull/1343
  • fix: WebSocket keepalive pings and database connection timeouts by @shockalotti in https://github.com/usekaneo/kaneo/pull/1323
  • chore(deps-dev): bump the npm_and_yarn group across 1 directory with 1 update by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1349
  • feat(notifications): notification inbox with real-time WebSocket updates by @shockalotti in https://github.com/usekaneo/kaneo/pull/1324

New Contributors

  • @Petr0611 made their first contribution in https://github.com/usekaneo/kaneo/pull/1320
  • @dmtrTm made their first contribution in https://github.com/usekaneo/kaneo/pull/1341
  • @nitin-bhadauria made their first contribution in https://github.com/usekaneo/kaneo/pull/1342
  • @shockalotti made their first contribution in https://github.com/usekaneo/kaneo/pull/1322
  • @krauzX made their first contribution in https://github.com/usekaneo/kaneo/pull/1343

Full Changelog: https://github.com/usekaneo/kaneo/compare/v2.7.7...v2.7.8

Security Fixes

  • chore(security): override transitive deps to patched versions

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track kaneo

Get notified when new releases ship.

Sign up free

About kaneo

All you need. Nothing you don't. Open source project management that works for you, not against you.

All releases →

Related context

Beta — feedback welcome: [email protected]