v1.52.1 v3.0.0

high risk

Worklenz/worklenzAug 27, 2026 → Aug 29, 20261 day between releases

What's New

Major version jump to open-core edition with enterprise feature restructuring and security hardening.

Breaking Changes

  • Enterprise features moved behind `src/ee/` seam.
  • Docker images published under `ghcr.io/worklenz`.

New Features

  • Client portal with invoices, services, and chat.
  • Project finance tools including rate cards and expenses.
  • Slack integration for projects and settings.
  • Recurring tasks and guest access levels.
  • Home dashboard rework and planner views.

Improvements

  • Security hardening via CodeQL (SSRF, XSS, ReDoS, SQL injection fixes).
  • Migration to `ghcr.io/worklenz` for Docker images.
  • Restored Docker and Nginx management scripts for self-hosting.

Bug Fixes

  • Fixed SSRF vulnerability in JIRA import.
  • Fixed XSS vulnerabilities in entity decoding and comment mentions.
  • Fixed ReDoS vulnerability in URL extractor.
  • Fixed SQL injection vulnerabilities across the codebase.
  • Fixed parameter type-confusion and tainted format strings.

Upgrade Notes

Enterprise features are now isolated in `src/ee/`, requiring code adjustments. Update Docker images to use `ghcr.io/worklenz`. Apply security patches for SSRF, XSS, and SQL injection.

The Two Releases

v1.52.1

v1.52.1

Aug 27, 2026· 2 months ago

This is a patch release that addresses a build configuration issue. It updates the connector build configuration to point to docker.io instead of the redpanda mirror.

Full release notes
v3.0.0

v3.0.0

Aug 29, 2026· 2 months ago

v3.0.0 introduces the open-core edition, aligning Enterprise and Open Source versioning. It consolidates six months of development, introducing a client portal, project finance tools, and Slack integration.

Full release notes