v0.12.25 v0.35.2

high risk

hasaneyldrm/exercises-datasetAug 31, 2026 → Aug 31, 20260 days between releases

What's New

Security patch hardens dashboard validation and fixes CDP WebSocket URL handling

Breaking Changes

  • Reverse-proxy origins now require exact HTTPS allowlisting and generated token authentication

Improvements

  • Hardened dashboard origin validation against DNS rebinding and smuggling
  • Aligned CLI and MCP lifecycle behavior

Bug Fixes

  • Fixed root remote CDP WebSocket URLs with query strings

Upgrade Notes

Update reverse proxy configurations to require exact HTTPS allowlisting and generated token authentication. Ensure dashboard options are strictly validated.

The Two Releases

v0.12.25

v0.12.25

Aug 31, 2026· 2 months ago

A maintenance release closing gaps since v0.12.23. It adds endpoints for reading meeting participants, supports Teams passcode joins, and enables sizing for spawned pods. It also unifies interactive acts under a single API endpoint.

Full release notes
v0.35.2

v0.35.2

Aug 31, 2026· 2 months ago

A security patch that hardens dashboard origin validation and reverse-proxy access to prevent attacks like DNS rebinding. Also fixes CDP WebSocket URL handling.

Full release notes