This release includes 1 security fix for security teams reviewing exposed deployments.
Published 27d
Productivity & Wikis
✓ No known CVEs patched
This release patches 1 known CVE
Topics
hono
issue-management
issue-tracker
jira-alternative
kanban
linear-alternative
+4 more
project-management
react
self-hosted
typescript
Affected surfaces
deps
Summary
AI summaryBroad release touches deps, deps-dev, helm, and fix.
Full changelog
What's Changed
- feat(helm): publishing helm chart to GHCR by @randoneering in https://github.com/usekaneo/kaneo/pull/1306
- fix(helm): define KANEO_POSTGRES_PASSWORD before DATABASE_URL by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1309
- chore(helm): bump chart to 0.4.2 by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1310
- chore(deps): bump hono from 4.12.19 to 4.12.23 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1290
- chore(deps-dev): bump hono from 4.12.19 to 4.12.23 in /packages/libs by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1307
- chore(deps-dev): bump turbo from 2.7.2 to 2.9.14 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1302
- chore(deps): bump @hono/node-server from 1.19.13 to 2.0.3 in /apps/api by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1292
- chore(dependabot): group non-major npm updates per package by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1311
- fix(deps): allow @hono/node-server v2 so the #1292 upgrade takes effect by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1313
- chore(security): override transitive deps to patched versions by @andrejsshell in https://github.com/usekaneo/kaneo/pull/1312
- feat: custom OAuth auto login, allow disabling the Login Form by @tiran133 in https://github.com/usekaneo/kaneo/pull/1279
- fix(comment): Improve Github comment formatting by @Asynchronite in https://github.com/usekaneo/kaneo/pull/1303
- docs(charts): improve README with missing configuration and troubleshooting guidance by @randoneering in https://github.com/usekaneo/kaneo/pull/1314
- fix: add enabled guard to useGetTask by @Petr0611 in https://github.com/usekaneo/kaneo/pull/1320
- feat(mcp): add task-relation and label-delete tools by @dmtrTm in https://github.com/usekaneo/kaneo/pull/1341
- fix(bug): fix for s3 files using old api URL by @randoneering in https://github.com/usekaneo/kaneo/pull/1332
- chore(deps): bump nodemailer from 8.0.7 to 9.0.1 by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1335
- chore(deps-dev): bump vite from 7.3.2 to 7.3.5 by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1337
- ci: add nightly builds by @tinsever in https://github.com/usekaneo/kaneo/pull/1347
- fix(docs): resolves bug 1346 by @randoneering in https://github.com/usekaneo/kaneo/pull/1350
- feat: support AWS IAM roles for S3 storage by @nitin-bhadauria in https://github.com/usekaneo/kaneo/pull/1342
- feat(comments): allow users to delete their own comments by @shockalotti in https://github.com/usekaneo/kaneo/pull/1322
- fix: use custom column names in webhook status reports by @krauzX in https://github.com/usekaneo/kaneo/pull/1343
- fix: WebSocket keepalive pings and database connection timeouts by @shockalotti in https://github.com/usekaneo/kaneo/pull/1323
- chore(deps-dev): bump the npm_and_yarn group across 1 directory with 1 update by @dependabot[bot] in https://github.com/usekaneo/kaneo/pull/1349
- feat(notifications): notification inbox with real-time WebSocket updates by @shockalotti in https://github.com/usekaneo/kaneo/pull/1324
New Contributors
- @Petr0611 made their first contribution in https://github.com/usekaneo/kaneo/pull/1320
- @dmtrTm made their first contribution in https://github.com/usekaneo/kaneo/pull/1341
- @nitin-bhadauria made their first contribution in https://github.com/usekaneo/kaneo/pull/1342
- @shockalotti made their first contribution in https://github.com/usekaneo/kaneo/pull/1322
- @krauzX made their first contribution in https://github.com/usekaneo/kaneo/pull/1343
Full Changelog: https://github.com/usekaneo/kaneo/compare/v2.7.7...v2.7.8
Security Fixes
- chore(security): override transitive deps to patched versions
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About kaneo
All you need. Nothing you don't. Open source project management that works for you, not against you.
Related context
Related tools
Beta — feedback welcome: [email protected]