Skip to content

v1.6.1

Choose a tag to compare

@github-actions github-actions released this 08 Sep 10:15
· 57 commits to main since this release

Added

  • Chrome Extension: You can now add the official Parcourse Extension to Chrome or Chromium-based browsers instead of loading the folder yourself.

Security

  • Set Your Own Secrets: The compose files no longer carry a working ENCRYPTION_KEY. Every instance that never set one was encrypting its stored provider keys with a value published in this repository, and any instance that kept JWT_SECRET=change-this-in-production could have its sign-in tokens forged. Both are now required, and the app refuses to start with either the old published value.
  • Your instance will not start after this upgrade until you have set both. .env.example has the command to generate each one sitting above it. A fresh ENCRYPTION_KEY leaves the provider API keys already stored unreadable, so enter those again afterwards; a fresh JWT_SECRET signs everyone out, and nothing worse.