Skip to content

Telemetry Tracker v1.16.2

Choose a tag to compare

View all tags
@unjica unjica released this 18 Jul 23:09
· 77 commits to develop since this release
v1.16.2
b7f810c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Dashboard API SSRF hardening — restrict dashboardApiFetch to relative /api paths on API_BASE_URL and validate error group ids before path interpolation (#574; CodeQL #12)
  • Dashboard API URL join — preserve an API_URL path prefix when resolving /api/... paths, and treat non-UUID detail route ids as not-found (#576)
  • shell-quote CVE-2026-9277 — pin transitive shell-quote to >=1.8.4 via pnpm override for Dependabot alert #38 (#575)

Upgrade (self-hosted)

From v1.16.1, no database migrations.

None — no database changes in this release.

Breaking changes

  • None.

Product update email

Skipped — mid-line PATCH on v1.16.x — Release Intelligence (line-close policy).

Ops notes

  • Leave brief-worker alone.
  • Reminder: Railway alert-rules-evaluator cron (node dist/jobs/run-alert-rules-evaluator.js) is still manual / not auto-provisioned if schedule-oriented CUSTOM Alert Rules are in use — see RAILWAY.md.

Full changelog

See CHANGELOG.md.

Assets 2
Loading