helm/onyx-0.9.21 v4.9.4

low risk

onyx-dot-app/onyxOct 22, 2026 → Oct 22, 20261 day between releases

What's New

Different release tracks; v4.9.4 is a patch pinning dependencies and speeding Entra group permission lookups.

Improvements

  • Document reader permission checks now enumerate only groups nested inside an Entra group, reducing lookup work.
  • dompurify pinned to 3.4.17 across the tree, including nested dependency overrides.
  • Next.js pinned to 16.4.1 and @sentry/nextjs to 10.75.2 for reproducible builds.
  • Storybook pinned to 10.6.2 everywhere in the repo.
  • Node base image digests refreshed, picking up upstream base-layer updates.

Bug Fixes

  • Nested dompurify copies that escaped the top-level pin are now forced to 3.4.17, closing a version-drift gap.

Upgrade Notes

The two tags come from separate release streams (a Helm chart version versus an application version), so treat this as a jump to app v4.9.4 rather than a chart-to-app upgrade. No configuration or schema changes are described; the work is dependency pinning plus one permission-path optimization. Rebuild images to inherit the new Node base digests and pinned packages, and re-run permission tests for Entra-backed document readers.

The Two Releases

helm/onyx-0.9.21

helm/onyx-0.9.21

Oct 22, 2026· 2 days ago

Minimal release notes: "Onyx application and Craft sandbox deployment chart"

Full release notes
v4.9.4

v4.9.4

Oct 22, 2026· 23 hours ago

Patch release for the v4.9 line that combines dependency pinning with a permissions performance improvement. It pins Storybook, dompurify, Next.js, and Sentry versions and updates Node base image digests. The release includes an optimization for listing only groups nested in an Entra group for document readers.

Full release notes