Skip to content

v0.18.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 22:50
· 270 commits to main since this release
v0.18.2
9cbb430
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • #135 ba237ac Dependency updates across the app: AI SDK providers and ai 7.0.150, AWS S3 SDK 3.1156, better-auth 1.7.12, posthog, react 19.3.1, react-router 8.5, react-query, lucide icons, vite 8.3.5. OpenTelemetry stays on the 2.12 / 0.223 line and API 1.9 until the SDK moves to 3.0 as a set.

  • #117 1f2cdbe Dependency fix: body-parser 2.4.0 (GHSA-27r3-jxmh-p828, a denial of service through trailing bytes after a compressed request, reachable through the MCP endpoint's Express layer). The image's base layers are now pinned by digest and Dependabot keeps them, the npm packages and the workflow actions current.

  • #111 ff53ef5 Reelsaw is published to the official MCP registry as io.github.osbytes/reelsaw on every release, and the Docker image carries the registry's server-name label, so registry-aware clients can install the reelsaw mcp bridge straight from the image.

  • #124 2a50493 The image is back on Node 22 LTS (an automated bump had moved it to Node 25, which is not an LTS line and was never built by CI). Automated base-image updates now stay within the major.

  • #131 4cc0fb7 Dependency fixes: nodemailer 10.2.1 (three address-parser advisories, GHSA-8c8m-p3m8-cjg8, GHSA-m943-m63m-w62w, GHSA-85x2-q946-cp5h) and fast-uri 3.1.9 (four URI parsing advisories reached through the MCP SDK's ajv). Each release's install folder now ships with a provenance attestation next to the zip.

Install or upgrade: reelsaw-0.18.2.zip below holds the compose file and installer pinned to this release; an existing install runs docker compose pull && docker compose up -d. Details in deploy/README.md. Full history: CHANGELOG.md.

Assets 4
Loading