Repository navigation
TutorLoom v1.0.3
Security
- Assignment submissions now check that the learner is enrolled in the course, as task and quiz submissions already do. Before this, any learner of the organisation could submit an assignment in a course they were not enrolled in. Reported by Santoshkumarpuppala.
- Updated dompurify to 3.4.17 and fflate (both used by jsPDF), the build tools @babel/core and esbuild, and the poetry.lock entries for urllib3, sqlparse, idna and Pygments, clearing their Dependabot alerts. minimatch stays open: it is used only by the ESLint toolchain, whose latest release still requires minimatch 10.
Changed
- Dependency updates: Pillow 13, lucide-react 1, @testing-library/jest-dom 7, React 19.3.1, Vite 7.3, Vitest 5.1 and other minor and patch updates.
All 1.0.x deployments should upgrade. See CHANGELOG.md.