This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryTasks can now have a configurable start date, hidden by default unless toggled via a new "Show scheduled" filter.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Replaced all `innerHTML` assignments with safer methods to prevent XSS. Replaced all `innerHTML` assignments with safer methods to prevent XSS. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Feature | Medium |
Tasks can now have a start date, hiding future tasks by default. Tasks can now have a start date, hiding future tasks by default. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Feature | Medium |
Added "Show scheduled" toggle chip in task filter bar for admins and parents. Added "Show scheduled" toggle chip in task filter bar for admins and parents. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Feature | Medium |
Future tasks display a "Starts on …" badge in the task card. Future tasks display a "Starts on …" badge in the task card. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Feature | Medium |
All 16 UI languages now include translations for start date field and filter toggle. All 16 UI languages now include translations for start date field and filter toggle. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Refactor | Medium |
Replaced all remaining `innerHTML` assignments in `tasks.js` with `replaceChildren` / `insertAdjacentHTML`. Replaced all remaining `innerHTML` assignments in `tasks.js` with `replaceChildren` / `insertAdjacentHTML`. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
Full changelog
Added
- Tasks can now have a start date: tasks with a future start date are hidden from the list by default, reducing cognitive load for children and family members who should focus on current assignments only
- A "Show scheduled" toggle chip in the task filter bar lets parents and admins see all upcoming planned tasks
- Future tasks display a "Starts on …" badge in the task card so the scheduled date is always visible at a glance
- All 16 UI languages include translations for the new start date field and filter toggle
Changed
- Replaced all remaining
innerHTMLassignments intasks.jswithreplaceChildren/insertAdjacentHTMLto comply with the project's XSS-safety constraint
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]