Skip to content

chore(release): v1.4.1 - #104

Merged
wfostersbp merged 1 commit into
mainfrom
release/v1.4.1
Oct 22, 2026
Merged

wfostersbp merged 1 commit into
mainfrom
release/v1.4.1

Conversation

@wfostersbp

Copy link
Copy Markdown
Member

Patch release carrying only #103: the bundled Node runtime moves from 22.20.0 to 22.23.4, the Node.js security release of 2026-10-21 (CVE-2026-111497 Brotli decoder RCE, plus the TLS hostname and dns.resolve fixes). Nothing else has landed since 1.4.0.

  • package.json / package-lock.json: 1.4.0 to 1.4.1
  • CHANGELOG.md: 1.4.1 entry under Security

After merge, push tag v1.4.1 on the merge commit; the release workflow verifies it matches package.json, builds the arm64 .deb and publishes the Release. The Pi then offers the update in the app banner.

Tracking: LABS-1035

🤖 Generated with Claude Code

Patch release carrying only the bundled Node runtime bump to 22.23.4 (#103),
the Node.js security release of 2026-10-21 (CVE-2026-111497 Brotli decoder
RCE and the TLS/DNS fixes). Nothing else changed since 1.4.0. Tracked in
LABS-1035.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@wfostersbp
wfostersbp merged commit dbe03a2 into main Oct 22, 2026
2 checks passed
@wfostersbp
wfostersbp deleted the release/v1.4.1 branch October 22, 2026 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant