This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryAdded "Verify SSL certificates" toggle for site archiving to support corporate proxies that intercept HTTPS.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds "Verify SSL certificates" toggle for site archiving in admin panel. Adds "Verify SSL certificates" toggle for site archiving in admin panel. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds new endpoints `GET`/`POST /api/archive-ssl-verify`. Adds new endpoints `GET`/`POST /api/archive-ssl-verify`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes site archiving failures behind TLS‑inspection proxies. Fixes site archiving failures behind TLS‑inspection proxies. Source: llm_adapter@2026-06-04 Confidence: high |
— |
Full changelog
Fixed
- Site archiving behind corporate firewalls/proxies. Archiving a
+httpslink from a machine behind a TLS-inspection proxy (Zscaler, Netskope, etc.) failed withunable to get local issuer certificate, because the corporate root CA isn't in the bundledcertifitrust store.
Added
- "Verify SSL certificates" toggle for site archiving in the admin panel (and a new
archive_ssl_verifyconfig setting, on by default). Turn it off if you're behind a proxy that intercepts HTTPS and archiving fails with a certificate error. When disabled, archive fetches skip certificate verification andmonolithis invoked with-k.
New endpoints: GET/POST /api/archive-ssl-verify.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Xafloc/NoteFlow
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]