Repository navigation
oneloop 0.1.0-rc.9
Pre-release
Pre-release
The ninth release candidate. A task's comments now read as a chat: comments
and replies show in one list in the order they were written, and each reply
shows the comment it answers. The Board's Done column no longer has the
Newest first button, because Done already lists finished tasks newest
first. This release also updates ctutils, tokio and DOMPurify for security
advisories. Read the upgrade notes before you upgrade; if you upgrade from an
older release candidate, read the upgrade notes of each release after yours
too.
Upgrade notes
- From 0.1.0-rc.8, the database doesn't change: it stays at schema 10. Stop
oneloop, install the new version and start it. If you run
oneloop db migrate --backup-dir <directory>as usual, it prints
database in <data folder> is current (schema 10)and changes nothing. - Browser tabs that are open during the upgrade reload themselves at a safe
moment, as before: when nothing typed would be lost and the tab is hidden or
unused for five minutes. Until then they keep working. - Existing comments and replies need nothing. They show in the chat in the
order they were written. - From 0.1.0-rc.7 or older, read the upgrade notes of each release after yours
too.
Changed
- A task's comments read as a chat. Comments and replies show in one list in
the order they were written, the newest last, so a reply to an older comment
no longer waits behind a closed N replies button further up the page.
Your own comments sit on the right. Every reply shows the comment it answers,
its author and first line, at the top of its bubble; choose that line to go
to the comment. While older comments aren't loaded, a comment that a reply
answers shows above a line that says so. Reply now writes in the box at
the bottom of the activity, and new comments keep arriving while you write a
reply; the box stays where it is on the screen. Comment text is a little
smaller.
Removed
- The Newest first button at the top of the Board's Done column. Since
0.1.0-rc.6, a task moved to Done with Move to, its Status,
Unblock and complete or an AI assistant goes to the top of the column,
so Done already lists finished tasks newest first by itself, and the button
only switched between two orders that looked the same. A card you drag into
Done still stays where you drop it. A browser that had the button on now
shows Done's own order. To put a finished task elsewhere, drag it or use
Move up and Move down.
Security
- Updated ctutils to 0.4.4 (RUSTSEC-2026-0385). The password hashing that
checks sign-ins uses it to compare values in constant time. - Updated tokio to 1.53.3 (RUSTSEC-2026-0386). Neither oneloop nor the
libraries it uses call the affected functions. - Updated DOMPurify to 3.4.17 in the browser's Markdown previews and in
Mermaid diagrams
(GHSA-cg2g-xh64-v4q7,
GHSA-mrv2-3pqr-j5jr,
GHSA-c6gr-qvv4-5v3f).
Each advisory needs a DOMPurify setting that neither oneloop nor Mermaid
uses (SAFE_FOR_TEMPLATES,IN_PLACEor the XHTMLPARSER_MEDIA_TYPE), so
oneloop was not affected.
Distribution
- Docker:
ghcr.io/code19m/oneloop:0.1.0-rc.9, for linux/amd64 and
linux/arm64 - From source:
cargo install --git https://github.com/code19m/oneloop --tag v0.1.0-rc.9 --locked