v3.2.6

drawdb-io/drawdbv3.2.6Jul 5, 2026by poeti8

AI Summary

This release focuses on security hardening and Single Sign-On (SSO) improvements. It introduces new configuration options for OIDC authentication and updates dependencies to address security vulnerabilities.

Key Highlights

Adds configurable OIDC prompt and button text for improved authentication flexibility
Updates dependencies (nodemailer, useragent) to fix security vulnerabilities
Sets SameSite: Lax for signed-in cookies to enhance session security

New Features

Configurable OIDC prompt to prevent forced re-authentication
Customizable OIDC login button text via `OIDC_BUTTON_TEXT` environment variable

Full Release Notes

- Add `OIDC_PROMPT`. Fixes OIDC forced re-authentication by making the prompt configurable. (PR #967 by @Jignesh4611)
- Add `OIDC_BUTTON_TEXT` to change OIDC login button text
- Use a new useragent library (`express-useragent`) to parse user agent. Fixes vulnerabilities found in the useragent package
- Update nodemailer package to fix vulnerabilities
- Set `SameSite: Lax` for signed-in cookies
- Use 404 HTTP status code for the 404 page
- Fix typo in the report page