Skedra v0.1.48

Changes since v0.1.47

• fix: support HTTP board creation and preserve MCP login redirects (1a8835c)

  • fix: support HTTP board creation and preserve MCP login redirects (205b4bdd)

  Changed files:

  • apps/api/src/lib/mcp-oauth.test.ts
  • apps/api/src/lib/mcp-oauth.ts
  • apps/api/src/mcp.ts
  • apps/web/src/hooks/use-canvas-store.ts
  • apps/web/src/lib/auth-client.ts
  • apps/web/src/lib/auth-redirect.test.ts
  • apps/web/src/lib/auth-redirect.ts
  • apps/web/src/lib/canvas/image-utils.ts
  • apps/web/src/lib/growth-analytics.ts
  • apps/web/src/lib/uuid.test.ts
  • apps/web/src/lib/uuid.ts
  • apps/web/src/routes/home.tsx
  • apps/web/src/routes/login.tsx
  • apps/web/src/routes/two-factor.tsx

Self-hosted Docker release for Skedra v0.1.48.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.48
• ghcr.io/moonriddim/skedra-community-web:v0.1.48
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.48
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.48

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.48.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.47

Changes since v0.1.46

• fix(security): update dependencies flagged by Dependabot (f4d1344)

  • fix(security): update dependencies flagged by Dependabot (ad51e7f9)
    Upgrade the MCP SDK from 1.29.0 to 1.32.1 to fix OAuth credential issuer confusion (GHSA-6qxp-vccf-f47h).
    Require proxy-addr 2.0.8 to fix IPv4-mapped IPv6 proxy trust handling (GHSA-jqcg-44mw-7w3h).
    Require source-map-js 1.2.2 to fix indexed source-map event-loop denial of service (GHSA-68fv-2mgg-jv7q).
    Audit dependencies before Docker releases, production deployments and npm SDK publishing.

    Validation: pnpm audit reports zero known vulnerabilities; full workspace tests, lint and production build passed.

  Changed files:

  • .github/workflows/docker-images.yml
  • apps/api/package.json
  • apps/mcp/package.json
  • pnpm-lock.yaml
  • pnpm-workspace.yaml

Self-hosted Docker release for Skedra v0.1.47.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.47
• ghcr.io/moonriddim/skedra-community-web:v0.1.47
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.47
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.47

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.47.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.46

Changes since v0.1.45

• ci: describe exported changes in Community commits and releases (+1 earlier changes) (ddb731e)

  • fix(security): harden OAuth, integrations and live board access (7aab365b)
    Separate OAuth consent and internal API tokens and validate token claims and scopes strictly.
    Block local AI and Obsidian server requests in managed deployments; constrain redirects and timeouts.
    Preserve existing workspace roles when inviting members and recheck presence sender, recipient and session access.
    Use the trusted proxy IP for authentication limits and correct password-reset rate limiting.
    Show unverified OAuth app and lookalike-domain warnings, normalize client names, and group IPv6 registration limits.
    Add connected MCP application settings with per-user revocation and clean up unused client registrations.
    Document the local security reviews and add offline attack-path regression coverage.

    Validation: full workspace tests, lint and production build passed.

  • ci: describe exported changes in Community commits and releases (6752bb75)
    Replace SHA-only Community sync messages with source commit descriptions and changed-file lists.
    Filter sync history to exported changes and retain Source-Commit lineage for subsequent runs.
    Generate release notes from the previous version tag in both the source and Community repositories.
    Check out the requested release tag for manual syncs and include the shared note generator in exports.

    Validation: four isolated Git-history regression tests; full workspace lint, tests and build passed.

  Changed files:

  • .github/scripts/change-notes.mjs
  • .github/workflows/docker-images.yml
  • apps/api/src/index.ts
  • apps/api/src/lib/ai-diagram.ts
  • apps/api/src/lib/ai-models.ts
  • apps/api/src/lib/ai-provider-policy.test.ts
  • apps/api/src/lib/ai-provider-policy.ts
  • apps/api/src/lib/ai-settings.ts
  • apps/api/src/lib/auth-security-options.test.ts
  • apps/api/src/lib/auth-security-options.ts
  • apps/api/src/lib/auth.ts
  • apps/api/src/lib/board-presence-access.test.ts
  • apps/api/src/lib/board-presence-access.ts
  • apps/api/src/lib/board-presence.test.ts
  • apps/api/src/lib/board-presence.ts
  • apps/api/src/lib/integration-security.test.ts
  • apps/api/src/lib/integration-sync.ts
  • apps/api/src/lib/mcp-consent.test.ts
  • apps/api/src/lib/mcp-consent.ts
  • apps/api/src/lib/mcp-internal-auth.ts
  • apps/api/src/lib/mcp-oauth.test.ts
  • apps/api/src/lib/mcp-oauth.ts
  • apps/api/src/lib/mcp-token-security.test.ts
  • apps/api/src/lib/team-invitation-security.test.ts
  • apps/api/src/mcp.e2e.ts
  • apps/api/src/mcp.ts
  • apps/api/src/trpc/index.ts
  • apps/api/src/trpc/routers/integrations.ts
  • apps/api/src/trpc/routers/mcp-connection.ts
  • apps/api/src/trpc/routers/team.ts
  • apps/web/src/components/settings/mcp-connections-settings.tsx
  • apps/web/src/lib/i18n/messages.de.ts
  • apps/web/src/lib/i18n/messages.en.ts
  • apps/web/src/routes/settings.tsx
  • scripts/change-notes.test.mjs

Self-hosted Docker release for Skedra v0.1.46.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.46
• ghcr.io/moonriddim/skedra-community-web:v0.1.46
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.46
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.46

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.46.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.45

Self-hosted Docker release for Skedra v0.1.45.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.45
• ghcr.io/moonriddim/skedra-community-web:v0.1.45
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.45
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.45

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.45.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.44

Self-hosted Docker release for Skedra v0.1.44.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.44
• ghcr.io/moonriddim/skedra-community-web:v0.1.44
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.44
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.44

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.44.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.43

Self-hosted Docker release for Skedra v0.1.43.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.43
• ghcr.io/moonriddim/skedra-community-web:v0.1.43
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.43
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.43

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.43.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.42

Security update: upgrade Nodemailer from 9.1.1 to 10.0.13, fast-uri to 3.1.8, and ip-address to 10.7.2. Refresh the workspace lockfile and security overrides; use Nodemailer's bundled TypeScript declarations.

Validation: dependency audit reports zero known vulnerabilities; lint, 565 tests, and the production build pass. All six transactional email scenarios serialize correctly with the upgraded mailer.

Self-hosted Docker release for Skedra v0.1.42. Images: - ghcr.io/moonriddim/skedra-community-api:v0.1.42 - ghcr.io/moonriddim/skedra-community-web:v0.1.42 - ghcr.io/moonriddim/skedra-community-libraries:v0.1.42 - ghcr.io/moonriddim/skedra-community-standalone:v0.1.42 One-container install: 1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.42. 2. Open http://localhost:3000. Compose install: 1. Download docker-compose.yml and env.example. 2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths. 3. Run docker compose --env-file .env up -d. The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected. Database migrations run inside the API container before the API server starts.

Skedra v0.1.41

Self-hosted Docker release for Skedra v0.1.41.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.41
• ghcr.io/moonriddim/skedra-community-web:v0.1.41
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.41
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.41

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.41.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.40

Self-hosted Docker release for Skedra v0.1.40.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.40
• ghcr.io/moonriddim/skedra-community-web:v0.1.40
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.40
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.40

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.40.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.

Skedra v0.1.39

Self-hosted Docker release for Skedra v0.1.39.

Images:

• ghcr.io/moonriddim/skedra-community-api:v0.1.39
• ghcr.io/moonriddim/skedra-community-web:v0.1.39
• ghcr.io/moonriddim/skedra-community-libraries:v0.1.39
• ghcr.io/moonriddim/skedra-community-standalone:v0.1.39

One-container install:

1. Run docker run -d --name skedra -p 3000:80 -v skedra_data:/data ghcr.io/moonriddim/skedra-community-standalone:v0.1.39.
2. Open http://localhost:3000.

Compose install:

1. Download docker-compose.yml and env.example.
2. Rename env.example to .env and adjust passwords, secrets, URLs, and volume paths.
3. Run docker compose --env-file .env up -d.

The deployment files and Skedra Community code, including the editor packages, use the Skedra Community License 1.0 (see the attached LICENSE). Personal and internal business self-hosting and contributions are allowed. Independent products, rebranding, and third-party hosted services require a separate written license. Earlier AGPL/MIT grants and third-party licenses remain unaffected.

Database migrations run inside the API container before the API server starts.