Skip to content

Release history

Cronicle releases

A simple, distributed task scheduler and runner with a web based UI.

All releases

22 shown

Review required
v0.9.124 Security
Dependencies

Harden event param validation

Review required
v0.9.123 Breaking
Auth Dependencies

bcryptjs replacement

Upgrade now
v0.9.122 Security
Dependencies

shell-quote bump

Upgrade now
v0.9.121 Security
Dependencies

Dependency vulnerability fixes

Upgrade now
v0.9.120 Bugfix
Dependencies

Queue and log watcher fixes

Review required
v0.9.119 Bug fix

Job retry leak fixed

Upgrade now
v0.9.118 Security
Dependencies

shell-quote bump

Upgrade now
v0.9.117 Security
Dependencies

Security fixes

v0.9.116 Security
Security fixes
  • Rebuilt package-lock.json to address several upstream vulnerabilities.
Changelog
  • Rebuild package-lock.json to address serveral upstream vulns.
v0.9.115 Bugfix

Fixed export/import failures when file paths contain spaces.

Changelog
  • Fix issue with export/import when file path includes spaces. Fixes #972.
v0.9.114 Bugfix

- Bump pixl-request to v2.6.5 for upstream vuln fixes in basic-ftp (sub-dep of proxy-agent). Yup, another one.

Full changelog
  • Bump pixl-request to v2.6.5 for upstream vuln fixes in basic-ftp (sub-dep of proxy-agent). Yup, another one.
v0.9.113 Bugfix

- Bump pixl-request to v2.6.4 for upstream vuln fixes in basic-ftp (sub-dep of proxy-agent).

v0.9.112 Security relevant
⚠ Upgrade required
  • Update pixl-mail and pixl-request dependencies as part of this upgrade to receive security patches.
Security fixes
  • Bumped pixl-mail to v1.1.7 to fix upstream vulnerability in nodemailer.
  • Bumped pixl-request to latest version to fix upstream security vulnerabilities.
Notable features
  • HTTP Plugin now supports separate configurable idle timeout and connect timeout settings (fixes #970).
v0.9.111 Security relevant
Breaking changes
  • update_event from job output now disabled by default, must be explicitly enabled via configuration
Security fixes
  • HTML injection protection in job outputs via sanitize-html package
  • Restricted update_event execution to prevent unauthorized job modifications
Notable features
  • HTML sanitization for user content in job outputs
  • Configurable update_event authorization policy
  • Security vulnerability reporting policy
v0.9.110 Maintenance

- Bump various deps for various upstream vuls - Add custom changelog script (to replace the aging auto-changelog NPM module).

v0.9.109 Bugfix

- Fix upstream vulns in fast-xml-parser and @aws-sdk/xml-builder. See #967

v0.9.107 Bugfix

- Bump pixl-server-storage to v4 for latest AWS SDK, for multiple upstream vuln fixes.

v0.9.106 Bugfix

Bug fix addressing crash when HTTP core errors occur during configured job chain reactions.

v0.9.105 Maintenance

- Restore master_ping_timeout to 60 seconds, as this is also the initial startup delay, so we don't want to double that for all users.

v0.9.104 Maintenance

Changed default master ping frequency to 5 seconds and timeout to 120 seconds with added protection against rare master conflict scenarios.

v0.9.103 Maintenance

- Ensure goMaster() function is only ever called once. Log a fatal error and shut down if it gets double-called.

Beta — feedback welcome: [email protected]