Skip to content

cli-8.97.3

Choose a tag to compare

View all tags
@riderx riderx released this 27 Oct 00:37
· 38 commits to main since this release
Immutable release. Only release title and notes can be modified.
cli-8.97.3
dba9dd9

馃啎 Changelog

Added

  • Added support for serving images exclusively from Cloudflare R2 for improved reliability and reduced origin load (#3922).
  • Bundle manifest files can now be sorted by name, size, or checksum (#3912).
  • Added clearer messaging for legacy plugins when failed update checks are intentionally ignored (#3914).

Changed

  • Improved queue dispatch reliability by sending only readable pgmq messages and preserving Cloudflare IDs when messages fail (#3918).
  • Updated agent documentation to clarify that read replicas use Google Cloud SQL rather than PlanetScale (#3911).
  • Updated Stripe integration documentation to clarify who consumes legacy trial Bento events (#3908).

Removed

  • Removed Sign in with Apple authentication. Organizations that previously relied on Apple SSO must migrate to another identity provider before upgrading (#3921).

Fixed

  • Kept the cron_stat_app stats collector within Cloudflare API rate limits (#3920).
  • Number, currency, and date formatting now follow the selected UI language (#3880).
  • Plan cards now show the Choose CTA when an organization has no active plan (#3874).
  • Legacy plugin update-check download failures are no longer miscounted as bundle failures (#3916).
  • Encrypted bundle checksums now display the SHA-256 algorithm type (#3913).
  • Support username prompts no longer appear in front of billing dialogs (#3909).
  • Snippet /stats now correctly handles native versions with prerelease or build tags (#3905).
  • Plugin network detection now queries ip-api only for Google and Apple networks, reducing unnecessary external requests (#3898).

Security

  • Deploy history now requires an accepted organization membership with an active role binding (#3860).
  • Deploy history reads now enforce the channel.read_history permission (#3868).
  • Attachment upload keys can no longer contain dot-segment path traversal sequences (#3867).
  • Default API key bindings are now capped at the owner鈥檚 rights (#3865).
  • Organization auto top-up and credit flag columns are now protected from unauthorized writes (#3863).
  • Direct RBAC user checks are now bound to the calling session (#3866).
  • public.users.email is kept in sync with the auth email to prevent stale or mismatched addresses (#3864).
  • Encrypted bundle enforcement checks are now restricted to the service role (#3859).
  • System-maintained app counters are now protected against direct client writes (#3862).
  • The CLI now writes the E2E private key with owner-only file permissions (#3923).

馃敆 Full Changelog: cli-8.97.2...cli-8.97.3

Assets 3
Loading