v0.17.0

alibaba/MNNv0.17.0Jul 23, 2026by korridor

AI Summary

A security-focused release that addresses a vulnerability in time-entry reassignment and improves system stability through job fixes and dependency updates.

Key Highlights

Critical security fix for time-entry reassignment vulnerability (GHSA-jj53-w7j5-jhp7)
Improved wording for time tracker alert emails
Reduction in the amount of failed background jobs
Dependency updates for GitHub Actions (checkout and setup-node)

Full Release Notes

> [!NOTE]
> This release includes security fixes, please make sure to upgrade as soon as possible.

## What's Changed
* Solidtime time-entry reassignment leaves stale user_id, letting the original owner bulk edit and delete a reassigned member's entry - thanks @ashrexon for the [report](https://github.com/solidtime-io/solidtime/security/advisories/GHSA-jj53-w7j5-jhp7)
* Fix awkward wording for time tracker alert email by @candideu in https://github.com/solidtime-io/solidtime/pull/1156
* Reduce amount of failed jobs by @korridor in https://github.com/solidtime-io/solidtime/pull/1157
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1126
* Bump actions/setup-node from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1161
* Extension manifest and dockerignore by @korridor in https://github.com/solidtime-io/solidtime/pull/1134

## New Contributors
* @candideu made their first contribution in https://github.com/solidtime-io/solidtime/pull/1156

**Full Changelog**: https://github.com/solidtime-io/solidtime/compare/v0.16.0...v0.17.0