Skip to content

v2.80.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Oct 22:55
v2.80.1
569a9c6

Self-hosted ZenNotes server 2.80.1 with the pinned browser artifact web-2.80.1-web.h16c9bfee43ba31d4 (built from ZenNotes/zennotes 06ab9d60, the v2.80.1 release commit). A same-day patch for server 2.80.0.

What changed for self-hosters:

  • No white square where a view's two scrollbars meet. In a dark theme, a view of the web app that scrolls both across and down, such as the Kanban board with lanes or a wide database grid, drew a solid white square in the corner between its scrollbars. The corner now shows the page behind it in every theme.
  • chi 5.4.0 (#59) for the advisory about spoofing a client's IP through X-Forwarded-For in chi's ClientIPFromXFF (chi 5.3.2 and earlier). This server never called ClientIPFromXFF or chi's RealIP middleware: it honours X-Forwarded-For only when the immediate peer is a proxy you configured. The vulnerable code no longer ships in the binary either. Go's vendored modules changed, so vendorHash moves with them.

Verification before publication: the release workflow (run 41140944393) built the five binaries from 569a9c6 after go, docker and nix checks passed on #60; every binary matches SHA256SUMS, and the manifest.json asset is byte-identical to the pinned web-artifact/manifest.json (web-2.80.1-web.h16c9bfee43ba31d4).

Docker: adibhanna/zennotes:2.80.1, 2.80 and latest are published from this tag by the repository's Docker publisher (linux/amd64 and linux/arm64, one digest).

Assets 10
Loading