Skip to content

spaceapp setup 1.1.1

Choose a tag to compare

View all tags
@oll4com oll4com released this 11 Oct 13:04
· 60 commits to main since this release
v1.1.1
e278c41

SpaceApp setup 1.1.1 fixes fresh installs on smaller machines, respects the telemetry answer, and updates dependencies with security fixes.

Fixes

  • Small-profile installs work again. On machines that select the small profile (the automatic choice on 8 GB systems), 1.0.36 and 1.1.0 waited for a workflow worker that this profile deliberately does not start, then rolled the installation back after ten minutes. Readiness now treats the disabled worker as expected, and a fresh small install completes in under a minute.
  • The telemetry answer is respected. The first-install ping is now sent only when you answer Yes to "Enable anonymous usage telemetry?" (the default is No) or set SPACEAPP_TELEMETRY to 1, true, yes or on. SPACEAPP_TELEMETRY=0 always disables it.

Security

  • @modelcontextprotocol/sdk 1.32.1, and patched proxy-addr 2.0.8, @fastify/busboy 3.2.2, source-map-js 1.2.2 and http-cache-semantics 4.3.0.
  • Runtime images replace npm's bundled postcss-selector-parser with 7.1.6 (CVE-2026-104844).
  • GHSA-2mjx-qc3c-rqvc affects the rustls copy compiled into @temporalio/core-bridge 1.24.0, the latest Temporal SDK. SpaceApp reaches Temporal only over its private compose network without TLS, so the flaw has no reachable path. A narrow ignore expires on 2026-11-10 and will be removed when a Temporal SDK release ships the fix.

Install or update

npx --yes run-spaceapp@latest install
npx --yes run-spaceapp@latest update

Validation

  • Exact candidate tested on Linux (VM218), Windows 11 (VM219, signed-in desktop) and macOS Sonoma (VM221): fresh install with automatic browser opening, owner setup, a first native AI task on a free OpenCode model, update from 1.1.0, repair, stopped Docker, stopped-PostgreSQL upgrade from 1.0.34, small/medium/large profile changes, doctor --fix, and a real guest restart with the same containers.
  • After publication, run-spaceapp@next was installed fresh and used to upgrade a retained 1.0.35 installation on all three systems, running the exact published GHCR digests with data preserved.
  • After promotion to latest, npx --yes run-spaceapp@latest update (no explicit version, no local images) upgraded another retained 1.0.35 installation on all three systems to the exact published digests, with database, files, secrets and workspaces preserved.
  • Release workflow: https://github.com/oll4com/spaceapp/actions/runs/38131634267

Known limitations

  • The free model for the first OpenCode session is chosen by a plain completion check. A model that passes it can still fail upstream during tool calls; switch models in OpenCode if a free model stops responding.
  • --access host-root is unchanged from 1.1.0.
Assets 2
Loading