Release history
Cronicle releases
A simple, distributed task scheduler and runner with a web based UI.
All releases
15 shown
- Rebuilt package-lock.json to address several upstream vulnerabilities.
Changelog
- Rebuild package-lock.json to address serveral upstream vulns.
Fixed export/import failures when file paths contain spaces.
Changelog
- Fix issue with export/import when file path includes spaces. Fixes #972.
- Bump pixl-request to v2.6.5 for upstream vuln fixes in basic-ftp (sub-dep of proxy-agent). Yup, another one.
Full changelog
- Bump pixl-request to v2.6.5 for upstream vuln fixes in basic-ftp (sub-dep of proxy-agent). Yup, another one.
- Bump pixl-request to v2.6.4 for upstream vuln fixes in basic-ftp (sub-dep of proxy-agent).
- Update pixl-mail and pixl-request dependencies as part of this upgrade to receive security patches.
- Bumped pixl-mail to v1.1.7 to fix upstream vulnerability in nodemailer.
- Bumped pixl-request to latest version to fix upstream security vulnerabilities.
- HTTP Plugin now supports separate configurable idle timeout and connect timeout settings (fixes #970).
- update_event from job output now disabled by default, must be explicitly enabled via configuration
- HTML injection protection in job outputs via sanitize-html package
- Restricted update_event execution to prevent unauthorized job modifications
- HTML sanitization for user content in job outputs
- Configurable update_event authorization policy
- Security vulnerability reporting policy
- Bump various deps for various upstream vuls - Add custom changelog script (to replace the aging auto-changelog NPM module).
- Fix upstream vulns in fast-xml-parser and @aws-sdk/xml-builder. See #967
- Bump pixl-server-storage to v4 for latest AWS SDK, for multiple upstream vuln fixes.
Bug fix addressing crash when HTTP core errors occur during configured job chain reactions.
- Restore master_ping_timeout to 60 seconds, as this is also the initial startup delay, so we don't want to double that for all users.
Changed default master ping frequency to 5 seconds and timeout to 120 seconds with added protection against rare master conflict scenarios.
- Ensure goMaster() function is only ever called once. Log a fatal error and shut down if it gets double-called.