Skip to content

Cascade Chat

v26.7.1 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 22d CLI & Terminal
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Topics

client irc irc-client ircv3 ircv3-support sasl

Summary

AI summary

Improved IRC module stability, added searchable invite picker and modal Whois, enhanced UI rendering of channel names and message list scrolling, and optimized performance by virtualizing the message list and removing polling.

Full changelog

What's Changed

  • feat(irc): right-click user menu — searchable invite picker + Whois as a modal by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/133
  • security: keychain-backed credentials, opt-in plugin PATH discovery, raw-send CRLF guard by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/134
  • perf: virtualize message list, drop the 2s poll, ordered event bus, per-row cleanups by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/135
  • feat(irc): close spec gaps I1–I4 — message splitting, ERROR handler, channel-key rejoin, ISUPPORT tokens by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/136
  • fix(channels): Close/Leave actually hide a joined channel by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/137
  • fix(irc): tear down on server ERROR (client showed "Connected" over a dead socket) by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/138
  • fix(irc): complete SASL before registration (library-owned CAP + pluggable mechanisms) by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/139
  • fix(irc): force-close socket on system wake so a sleep-killed connection can't zombie by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/140
  • fix(irc): connection reliability — half-open socket watchdog + plugin IPC deadlock (event-bus freeze) by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/141
  • fix(irc): stop connect-then-disconnect churn — CAP REQ flood + no connecting-state by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/142
  • fix(ui): stop mangling #channel names with underscores; add backtick monospace by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/143
  • feat(brand): new mountain app icon and matching sidebar mark by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/144
  • fix(ui): reliable message-list scroll — adopt react-virtual anchorTo:'end', drop CSS smooth by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/145
  • fix(ui): baseline-align 'Chat' with 'Cascade' in sidebar header by @matt0x6F in https://github.com/matt0x6F/irc-client/pull/146

Full Changelog: https://github.com/matt0x6F/irc-client/compare/v26.7.0...v26.7.1

Security Fixes

  • Keychain-backed credentials (opt‑in)
  • Plugin PATH discovery (opt‑in)
  • Raw‑send CRLF guard

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Cascade Chat

Get notified when new releases ship.

Sign up free

About Cascade Chat

All releases →

Related context

Related tools

Beta — feedback welcome: [email protected]