Skip to content

v1.2.9

Choose a tag to compare

View all tags
@CoderLuii CoderLuii released this 05 Nov 05:41
· 1 commit to main since this release
v1.2.9
3252a77

11/04/2026

Changed

  • Updated Node.js to 24.22.2, OpenCode to 1.19.5, Claude Code to 2.1.318 and GitHub CLI to 2.103.3.
  • Updated npm to 12.2.2, pnpm to 12.16.1, Wrangler to 4.157.0 and Lighthouse to 13.6.0.
  • Updated Python Playwright to 1.64.1, Certifi to 2026.10.23 and pip to 26.3.
  • Followed Paperclip's official Cursor SDK 1.3.1 resolution. Paperclip stays at 2026.831.1 with jsdom 30.1.3 and Undici 8.12.3.
  • Raised the official Debian Chromium, common and sandbox floor to 156.0.8078.79-1~deb13u1 on AMD64 and ARM64.
  • Updated Docker Scout to 1.29.0. Full scanner reports and accepted upstream findings remain attached to the release.

Fixed

  • Removed the old npm node-gyp/Undici replacements. npm 12.2.2 supplies its own official bundle.
  • Removed PM2's js-yaml and get-uri/basic-ftp replacements. PM2 7.1.2 supplies js-yaml 4.3.2 and no longer includes the old FTP subtree.
  • Removed pip vendor repairs. The runtime and offline seed use the unmodified official pip 26.3 wheel.
  • Followed Lighthouse's current trace-engine graph without the removed legacy-javascript dependency.

Security

Known upstream vulnerabilities remain in bundled third-party software. Accepting them doesn't fix them or prove they're safe. See the attached reports for affected packages and versions.

Avoid untrusted browser content and automation while known findings remain. Keep the non-root user, Chromium sandbox, supplied seccomp profile and closed browser port.

Paperclip stays at 2026.831.1 and Claude Auth stays at 2.2.1. This release doesn't verify a Claude Auth token-refresh fix. Existing compatibility holds and persistent data paths remain unchanged.

Assets 27
Loading