Skip to content

mealie

v3.19.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 7d Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

meal-plans recipe-manager self-hosted

Affected surfaces

deps

Summary

AI summary

Updates ⬆️ Dependency updates, deps, and 🧰 Maintenance across a mixed release.

Full changelog

🍴🍴🍴🍴🍴🍴

This update fixes a bug with recipe actions not loading. Also included are several dependency updates.

🐛 Bug fixes

  • fix: Make most recipe action columns filterable @michael-genson (#7689)

🧰 Maintenance

  • chore(l10n): New Crowdin updates @hay-kot (#7660)
  • chore(l10n): New Crowdin updates @hay-kot (#7661)
  • chore(l10n): New Crowdin updates @hay-kot (#7687)

🔨 Internal development

  • dev: Disable approvals for lockfile maintenance PR creation @michael-genson (#7666)

⬆️ Dependency updates

19 changes
  • chore(deps): update dependency nuxt to v4.4.6 [security] @renovate[bot] (#7667)
  • chore(deps): update dependency types-pyyaml to v6.0.12.20260518 @renovate[bot] (#7670)
  • fix(deps): update dependency pydantic-settings to v2.14.1 @renovate[bot] (#7674)
  • fix(deps): update dependency lxml to v6.1.1 @renovate[bot] (#7679)
  • fix(deps): update dependency python-multipart to v0.0.29 @renovate[bot] (#7675)
  • fix(deps): update dependency uvicorn to v0.47.0 @renovate[bot] (#7684)
  • fix(deps): update dependency requests to v2.34.2 @renovate[bot] (#7683)
  • chore(deps): update dependency coverage to v7.14.0 @renovate[bot] (#7676)
  • chore(deps): update dependency mypy to v2.1.0 @renovate[bot] (#7681)
  • fix(deps): update dependency pyjwt to v2.13.0 @renovate[bot] (#7682)
  • chore(deps): lock file maintenance @renovate[bot] (#7685)
  • fix(deps): update dependency pydantic to v2.13.4 @renovate[bot] (#7673)
  • chore(deps): update node.js to 8530f76 @renovate[bot] (#7668)
  • fix(deps): update dependency openai to v2.38.0 @renovate[bot] (#7677)
  • chore(deps): update dependency types-requests to v2.33.0.20260518 @renovate[bot] (#7671)
  • chore(deps): update dependency types-python-dateutil to v2.9.0.20260518 @renovate[bot] (#7669)
  • fix(deps): update dependency orjson to v3.11.9 @renovate[bot] (#7672)
  • fix(deps): update dependency python-ldap to v3.4.7 @renovate[bot] (#7680)
  • chore(deps): update dependency ruff to v0.15.14 @renovate[bot] (#7678)

🍴🍴🍴🍴🍴🍴

Security Fixes

  • chore(deps): update dependency nuxt to v4.4.6 [security]
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track mealie

Get notified when new releases ship.

Sign up free

About mealie

Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family. Easily add recipes into your database by providing the url and mealie will automatically import the relevant data or add a family recipe with the UI editor

All releases →

Related context

Related tools

Beta — feedback welcome: [email protected]