Download Latest Version v0.11.5 source code.zip (1.6 MB) Google Add to Preferred Sources
Home / v0.11.5
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-09-04 1.7 kB
0
v0.11.5 source code.tar.gz 2026-09-04 1.4 MB
1 1 weekly downloads
v0.11.5 source code.zip 2026-09-04 1.6 MB
0
Totals: 3 Items   3.0 MB 1

v0.11.5

Stack updates

  1. Update rubygems from 4.0.18 to 4.0.19 by @biow0lf in [#3103]
  2. Update bundler from 4.0.18 to 4.0.19 by @biow0lf in [#3103]
  3. Update thruster gem from 0.1.25 to 0.1.26 by dependabot in [#3101]

New features

  1. Configure HTTP Permissions Policy by @biow0lf in [#3108]

Security

  1. Enable a strict application-wide Content Security Policy with per-request nonces and CSP-compatible UI behavior by @mikelolasagasti in [#3109]
  2. Update omniauth-google-oauth2 gem from 1.2.2 to 1.2.3 by dependabot in [#3122]
  3. Fix XSS in comment notification email by @mikelolasagasti in [#3094]. GHSA-623h-px8r-9643. CVE is pending.
  4. XSS via notice backtrace file path. Fixed by @mikelolasagasti in [#3109]. GHSA-p452-6f7x-vcqx. CVE is pending.

Thanks

  1. @saidM for reporting GHSA-p452-6f7x-vcqx.
  2. @mikelolasagasti for helping with the new release. By the way, welcome to the team!
Source: README.md, updated 2026-09-04