v1.13.0-rc.2

1.13.0-rc.2 (2026-07-20)

Features

• send hsts on secure responses and default the secure session cookie (#659) (7ee77dd)

Bug Fixes

• give the browser-written cookies samesite and secure flags (#657) (082b967)

---

🚧 Release candidate

This is a release candidate, published for testing ahead of 1.13.0. It is not supported for production — run it against a copy of your data, not your live workspace, and expect it to be superseded without notice. Self-hosters should stay on the latest stable release.

📦 Docker image

This release is published to the GitHub Container Registry:

ghcr.io/emmpaul/the-desk:1.13.0-rc.2

Pull it directly or browse the package page. See the upgrade guide for self-hosting steps.