v3.2.6

cloudflare/pingorav3.2.6Jul 5, 2026by poeti8

AI Summary

This release introduces configurable OIDC settings, updates security dependencies, and improves cookie handling for better security and user experience.

Key Highlights

Added OIDC_PROMPT and OIDC_BUTTON_TEXT to make OIDC authentication flow customizable
Updated express-useragent and nodemailer packages to fix security vulnerabilities
Set SameSite: Lax for signed-in cookies to enhance session security
Standardized the 404 page to use the 404 HTTP status code

New Features

OIDC prompt configuration
OIDC button text customization

Full Release Notes

- Add `OIDC_PROMPT`. Fixes OIDC forced re-authentication by making the prompt configurable. (PR #967 by @Jignesh4611)
- Add `OIDC_BUTTON_TEXT` to change OIDC login button text
- Use a new useragent library (`express-useragent`) to parse user agent. Fixes vulnerabilities found in the useragent package
- Update nodemailer package to fix vulnerabilities
- Set `SameSite: Lax` for signed-in cookies
- Use 404 HTTP status code for the 404 page
- Fix typo in the report page