v0.8.6

eyaltoledano/claude-task-masterv0.8.6Sep 3, 2026by svilenmarkov

Upgrading?

AI Summary

This release focuses on stability and security, addressing issues with Reddit widgets, Docker containers, authentication bypass, and various UI glitches. It also adds helper functions for custom API requests.

Key Highlights

  • Fixed Reddit widget fetching due to challenge page changes
  • Fixed X-Forwarded-For spoofing security vulnerability
  • Added `withAllowInsecure` and `withBasicAuth` helpers to custom-api
  • Improved video widget caching and reuse

New Features

  • `withAllowInsecure` function
  • `withBasicAuth` function

Full Release Notes

## Fixed
- Reddit widget not fetching new posts due to challenge page changes
- Unhealthy docker containers not getting identified correctly 
- selfhst icons showing outdated icons
- X-Forwarded-For spoofing which would allow rate-limit bypass for auth
- Misleading currency symbols for some markets in the markets widget
- Incorrect handling of https sock-path in the `docker-containers` widget
- Incorrect sorting for `reddit`, `hacker-news` and `lobsters` widgets with `sort-by: engagement`
- Search bang indicator not getting cleared correctly after pressing `enter`
- Not being able to use the `dns-stats` widget on a Pi-hole instance without a password
- Not being able to use `webp` extension for icons
- RSS feeds not showing correct thumbnails when image URL is a relative path
- Incorrect `manifest.json` path when using `base-url`

## Changes
- Videos widget will now cache and reuse video lists if an update fails for a channel
- Added `withAllowInsecure` function to `custom-api`
- Added `withBasicAuth` function to `custom-api`

Related Repositories