v29.1

Notifuse/notifusev29.1Apr 7, 2026by pierre-b

AI Summary

This is a maintenance and security release that addresses a critical CVE (CVE-2026-39363) for arbitrary file read via WebSocket, fixes MJML template compilation errors, changes automation behavior for unsubscribed contacts, and modifies social media button defaults.

Key Highlights

Security fix: Upgraded Vite to 7.3.2 in console and notification center to patch CVE-2026-39363
Fixed MJML template compilation errors by removing invalid `visibility` attribute from section output
Automation now exits when contact is unsubscribed/bounced/complained for marketing emails while allowing transactional emails
Social media buttons now link directly to pages by default instead of wrapping URLs in share prompts

Breaking Changes

Automation behavior change: Marketing email automations now stop when contacts are unsubscribed, bounced, or complained (#304)
Social media buttons now link directly to pages by default instead of using share prompts - may affect existing templates (#306)

New Features

Added 'Share link' toggle to social element settings to control button behavior (#306)

Full Release Notes

- **Security**: Upgraded Vite to 7.3.2 in console and notification center to fix arbitrary file read via WebSocket (CVE-2026-39363)
- **Fix**: Removed invalid `visibility` attribute from MJML section output that caused template compilation errors (#305)
- **Fix**: Automation now exits when contact is unsubscribed/bounced/complained for marketing emails, while still allowing transactional emails to be sent (#304)
- **Fix**: Social media buttons now link directly to pages by default instead of wrapping URLs in share prompts; added "Share link" toggle to social element settings (#306)