Skip to content

career-ops

vcareer-ops-v1.13.0 scope: career-ops Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai ai-agent anthropic ats automation beginner-friendly
+11 more
career careerops claude claude-code cli go interview-prep job-application job-hunting job-search resume

Affected surfaces

rce_ssrf

Summary

AI summary

Updates 1.13.0, Bug Fixes, and 2026-06-25 across a mixed release.

Full changelog

1.13.0 (2026-06-25)

Features

  • arbeitsagentur: config-driven remoteMatch + server-side homeoffice filter (#1189) (a463308)
  • batch: add --skip-pdf flag to batch-runner.sh (#1182) (256a289)
  • dashboard: add in-viewer status picker overlay (#1195) (cc53485)
  • dashboard: customizable columns with column picker (#979) (9d1404f)
  • dashboard: recognize EUR/GBP/CHF pay and international cities in pipeline derive (#1157) (a1c7ce2)
  • liveness: zero-token ATS API check before Playwright (closes #574) (#1181) (44f9e64)
  • modes: add Polish (pl) locale modes (#1129) (51711b3)
  • modes: optional voice-dna.md writing guardrail (#998) (018eb0f)
  • portals: add verify-portals.mjs ATS slug validator (#1016) (7aeb016)
  • providers: add BambooHR provider (#1141) (39bb6b2)
  • providers: add Breezy HR scanner provider (#1185) (6249bcb)
  • scan: add --json output, --include-undated, and --shuffle to scan-ats-full (#1199) (12206f7)
  • tracker: add delete --num N to remove an application row safely (#1200) (a644392)

Bug Fixes

  • auto-create data/pipeline.md and harden Playwright doctor check (#1059) (188cf76)
  • batch: harden status score handling (#1133) (fbce3f2)
  • batch: use awk instead of bc for score math (#735) (afa74c2)
  • contract: expand interview-prep/* coverage in DATA_CONTRACT (#1060) (d19db79)
  • dashboard: rewrite only the Status cell on status update (#1186) (b1cba0f)
  • images not rendering in PDF output due to about:blank origin (#1165) (81752df)
  • normalize report links from data files (#1134) (6ae011f)
  • providers: harden lever/ashby/workday against SSRF via redirect (950aad5)
  • recruitee: keep offer URLs on tenant custom domains (#1116) (7c7fd99)
  • scan: guard title-filter keyword normalization against malformed config (#1187) (68c0cdf)
  • scan: match short acronym title-filter keywords on word boundaries (#1102) (424f864)
  • template: emit mailto:/tel: links for email and phone in CV header (#1167) (7a4b3b6)
  • templates: disable fi/fl ligatures for ATS-clean PDF text extraction (#1175) (#1176) (51ef241)

Security Fixes

  • Hardened lever, Ashby, Workday providers against SSRF via redirect

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track career-ops

Get notified when new releases ship.

Sign up free

About career-ops

AI-powered job search system built on Claude Code. 14 skill modes, Go dashboard, PDF generation, batch processing.

All releases →

Related context

Beta — feedback welcome: [email protected]