Skip to content

oneloop 0.1.0-rc.9

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 29 Oct 10:03
d4c6a8a

The ninth release candidate. A task's comments now read as a chat: comments
and replies show in one list in the order they were written, and each reply
shows the comment it answers. The Board's Done column no longer has the
Newest first button, because Done already lists finished tasks newest
first. This release also updates ctutils, tokio and DOMPurify for security
advisories. Read the upgrade notes before you upgrade; if you upgrade from an
older release candidate, read the upgrade notes of each release after yours
too.

Upgrade notes

  • From 0.1.0-rc.8, the database doesn't change: it stays at schema 10. Stop
    oneloop, install the new version and start it. If you run
    oneloop db migrate --backup-dir <directory> as usual, it prints
    database in <data folder> is current (schema 10) and changes nothing.
  • Browser tabs that are open during the upgrade reload themselves at a safe
    moment, as before: when nothing typed would be lost and the tab is hidden or
    unused for five minutes. Until then they keep working.
  • Existing comments and replies need nothing. They show in the chat in the
    order they were written.
  • From 0.1.0-rc.7 or older, read the upgrade notes of each release after yours
    too.

Changed

  • A task's comments read as a chat. Comments and replies show in one list in
    the order they were written, the newest last, so a reply to an older comment
    no longer waits behind a closed N replies button further up the page.
    Your own comments sit on the right. Every reply shows the comment it answers,
    its author and first line, at the top of its bubble; choose that line to go
    to the comment. While older comments aren't loaded, a comment that a reply
    answers shows above a line that says so. Reply now writes in the box at
    the bottom of the activity, and new comments keep arriving while you write a
    reply; the box stays where it is on the screen. Comment text is a little
    smaller.

Removed

  • The Newest first button at the top of the Board's Done column. Since
    0.1.0-rc.6, a task moved to Done with Move to, its Status,
    Unblock and complete or an AI assistant goes to the top of the column,
    so Done already lists finished tasks newest first by itself, and the button
    only switched between two orders that looked the same. A card you drag into
    Done still stays where you drop it. A browser that had the button on now
    shows Done's own order. To put a finished task elsewhere, drag it or use
    Move up and Move down.

Security

  • Updated ctutils to 0.4.4 (RUSTSEC-2026-0385). The password hashing that
    checks sign-ins uses it to compare values in constant time.
  • Updated tokio to 1.53.3 (RUSTSEC-2026-0386). Neither oneloop nor the
    libraries it uses call the affected functions.
  • Updated DOMPurify to 3.4.17 in the browser's Markdown previews and in
    Mermaid diagrams
    (GHSA-cg2g-xh64-v4q7,
    GHSA-mrv2-3pqr-j5jr,
    GHSA-c6gr-qvv4-5v3f).
    Each advisory needs a DOMPurify setting that neither oneloop nor Mermaid
    uses (SAFE_FOR_TEMPLATES, IN_PLACE or the XHTML PARSER_MEDIA_TYPE), so
    oneloop was not affected.

Distribution

  • Docker: ghcr.io/code19m/oneloop:0.1.0-rc.9, for linux/amd64 and
    linux/arm64
  • From source:
    cargo install --git https://github.com/code19m/oneloop --tag v0.1.0-rc.9 --locked