monetr

v1.14.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Dashboards & Home Pages

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Affected surfaces

deps breaking_upgrade

ReleasePort's take

Moderate signal

editorial:auto 1mo

Version v1.14.3 updates dependencies across the API and UI, adds a PATCH transaction endpoint, deprecates the PUT funding‑schedules endpoint (requiring migration), fixes a password‑reset spam issue, and improves client handling of HTTP 429 responses.

Why it matters: Deprecation of the PUT funding‑schedules API with severity 70 mandates migration before it is removed; addressing the password‑reset spam vector (severity 40) protects user accounts from abuse.

Summary

AI summary

Updates 1.14.3, Bug Fixes, and Refactor across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Add PATCH endpoint for transactions in api component. Add PATCH endpoint for transactions in api component. Source: llm_adapter@2026-06-15 Confidence: high	—
Dependency
Dependency	Low	Update golang.org/x to v0.46.0 in api component. Update golang.org/x to v0.46.0 in api component. Source: llm_adapter@2026-06-15 Confidence: high	—
Dependency	Low	Upgrade containers runtime Go version to 1.26.4. Upgrade containers runtime Go version to 1.26.4. Source: llm_adapter@2026-06-15 Confidence: high	—
Dependency	Low	Update renovate tooling Go version to 1.26.4. Update renovate tooling Go version to 1.26.4. Source: llm_adapter@2026-06-15 Confidence: high	—
Dependency	Low	Migrate UI codebase to TypeScript v6. Migrate UI codebase to TypeScript v6. Source: llm_adapter@2026-06-15 Confidence: high	—
Dependency	Low	Upgrade React monorepo in UI to version 19.2.17. Upgrade React monorepo in UI to version 19.2.17. Source: llm_adapter@2026-06-15 Confidence: high	—
Deprecation	High	Deprecate PUT funding schedules API endpoint; migration required. Deprecate PUT funding schedules API endpoint; migration required. Source: llm_adapter@2026-06-15 Confidence: high	—
Bugfix	Medium	Fix forgot password spam vector in api component. Fix forgot password spam vector in api component. Source: llm_adapter@2026-06-15 Confidence: high	—
Bugfix	Medium	Handle HTTP 429 responses for registration and login in ui component. Handle HTTP 429 responses for registration and login in ui component. Source: llm_adapter@2026-06-15 Confidence: high	—
Refactor	Low	Redesign documentation site. Redesign documentation site. Source: llm_adapter@2026-06-15 Confidence: high	—

Full changelog

1.14.3 (2026-06-15)

Dependencies

api: update golang.org/x to v0.46.0 (#3291) (47200ee)
containers: update golang to v1.26.4 (#3297) (1aa2d45)
renovate: update golang to v1.26.4 (#3293) (277c1ed)
ui: update dependency @monetr/notify to v1.0.6 (#3303) (ca115ee)
ui: update dependency @monetr/vaul to v1.2.6 (#3304) (44b032b)
ui: update dependency date-fns to v4.4.0 (#3285) (3ce14b9)
ui: update dependency downshift to v9.3.4 (#3288) (513ee87)
ui: update dependency downshift to v9.3.6 (#3300) (9f65d6f)
ui: update dependency hast-util-from-html to v2.0.3 (#3310) (8062f0d)
ui: update radix-ui-primitives monorepo (#3308) (3e5f0d4)
ui: update react monorepo (#3305) (2c3f81f)
ui: update react monorepo to v18.3.30 (#3292) (a08ce73)
ui: update react monorepo to v19.2.17 (#3306) (f87571b)
ui: update rsbuild (#3286) (eee6fa5)
ui: update rstest to v0.10.3 (#3284) (a819735)
ui: update sass to v1.5.3 (#3287) (015a425)
ui: update shiki monorepo to v4.2.0 (#3298) (e016389)
ui: update tanstack-query monorepo to v5.101.0 (#3296) (0074e2f)

Bug Fixes

api: Bank account schema validation at creation (e10b248)
api: Don't allow blank funding shcedule names (4510658)
api: Fixed forgot password spam vector (e4f0a37)
api: Fixing some RRules allowing invalid by rules (3f0a70e)
api: Improving bank account API schema validation (c7a1984)
api: Improving Lunch Flow API endpoints (1cd072c)
ui: Handle 429 response codes for registration too (981c086)
ui: Handle 429 too many requests on use login (c806d93)

Refactor

api: Adding PATCH endpoint for transactions (c80f526)
api: Deprecate the PUT funding schedules API endpoint (68ca0cb)
api: Improving API around lunch flow links schema validation (7f3d7b9)
docs: Redesigning documentation site (#3307) (25d597f)
Migrating to react 19 (#3289) (5580929)
ui: Migrating to typescript v6 (#3272) (70ae62e)

Breaking Changes

Deprecate the PUT funding schedules API endpoint (use PATCH instead)

Security Fixes

Fixed forgot password spam vector in api

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track monetr

Get notified when new releases ship.

About monetr

monetr is a budgeting application focused on planning for recurring expenses.

All releases →