Starstruk Logo MarkStarstruk

v0.16.0

actix/actix-webv0.16.0Jul 9, 2026by Onatcer

AI Summary

This release for the Solidtime project includes security fixes for a path traversal vulnerability in the Toggl ZIP importer, performance optimizations for large data collections, and fixes to import handling.

Key Highlights

  • Security fix for Path Traversal issue in Toggl ZIP Data Importer.
  • Performance optimizations for large data collections via pagination and virtualizers.
  • Clockify exports now handle dropped client columns.
  • Guarantees stable sorting for large collections using ID as a tiebreaker.

Full Release Notes

> [!NOTE]
> This release includes security fixes, please make sure to upgrade as soon as possible.

## What's Changed
* The Project-Task-Selector now also shows the Client name
* Add filter to include/exclude tags by @smileBeda in https://github.com/solidtime-io/solidtime/pull/1133
* Performance optimizations for large data collections (projects, clients, tasks) in the index views and dropdown components via pagination and virtualizers by @Onatcer in https://github.com/solidtime-io/solidtime/pull/1140

## Smaller Fixes
* Clockify exports now sometimes drop the client column, so we changed the importer to adopt to that change
* Large collections from imports caused the pagintion to silently drop items when iterating through it because the created_at was used as the only sorting key, it now guarantees stable sorting via the ID as a tiebreaker

## Security
* Thanks to @bharatdevasani for reporting a [Path Traversal issue in Toggl ZIP Data Importer](https://github.com/solidtime-io/solidtime/security/advisories/GHSA-cj49-589g-wp6j), which allowed for arbitrary directory creation & filesystem existence oracle. It was fixed in this version as well. 

## New Contributors
* @smileBeda made their first contribution in https://github.com/solidtime-io/solidtime/pull/1133

**Full Changelog**: https://github.com/solidtime-io/solidtime/compare/v0.15.1...v0.16.0