v0.17.0

JinhuaLiang/WavCraftv0.17.0Jul 23, 2026by korridor

AI Summary

This release prioritizes security by fixing a critical vulnerability in time-entry reassignment and includes improvements to job processing reliability. It also updates various dependencies and fixes minor wording issues in alert emails.

Key Highlights

Security fix for time-entry reassignment vulnerability allowing unauthorized bulk edits and deletes.
Reduction in failed jobs to improve system stability.
Fixed awkward wording in time tracker alert emails.
Updated GitHub Actions dependencies (actions/checkout and actions/setup-node).

Full Release Notes

> [!NOTE]
> This release includes security fixes, please make sure to upgrade as soon as possible.

## What's Changed
* Solidtime time-entry reassignment leaves stale user_id, letting the original owner bulk edit and delete a reassigned member's entry - thanks @ashrexon for the [report](https://github.com/solidtime-io/solidtime/security/advisories/GHSA-jj53-w7j5-jhp7)
* Fix awkward wording for time tracker alert email by @candideu in https://github.com/solidtime-io/solidtime/pull/1156
* Reduce amount of failed jobs by @korridor in https://github.com/solidtime-io/solidtime/pull/1157
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1126
* Bump actions/setup-node from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1161
* Extension manifest and dockerignore by @korridor in https://github.com/solidtime-io/solidtime/pull/1134

## New Contributors
* @candideu made their first contribution in https://github.com/solidtime-io/solidtime/pull/1156

**Full Changelog**: https://github.com/solidtime-io/solidtime/compare/v0.16.0...v0.17.0