v4.8.8 v4.7.14
onyx-dot-app/onyxOct 22, 2026 → Oct 22, 20260 days between releases
What's New
v4.7.14 is a v4.7-line backport with a permission-sync fix and Pillow CVE patch, not a forward upgrade from v4.8.8.
Improvements
- Pillow bumped to 13.0.0 to close security advisory GHSA-8g5g-8vmr-9782.
- certifi pinned to 2026.10.19, with next 16.4.1, @sentry/nextjs 10.75.2, dompurify 3.4.17 and Node base image digests aligned to the same values used in v4.8.8.
- CI stabilized by suppressing OpenSearch disk-watermark flakes on test runners.
- Hotfixes cherry-picked onto the v4.7 branch, including per-run CVE alert posts.
Bug Fixes
- Permission sync now skips inactive cc_pairs instead of processing them.
- Failed group syncs back off rather than retrying aggressively.
- OpenSearch disk-watermark check no longer flakes on CI runners.
Upgrade Notes
This is a maintenance release on the older v4.7 line, so moving from v4.8.8 to v4.7.14 is a minor-version step backwards and only makes sense if you are deliberately pinned to v4.7. No config changes or migrations are required, and the shared dependency pins (Next.js, Sentry, dompurify, Node image) already match v4.8.8. If you are on v4.8.x, take the permission-sync and Pillow fixes from a v4.8-line release instead.
The Two Releases
v4.8.8
Oct 22, 2026· 1 day ago
Patch release focused on dependency maintenance and version pinning for the v4.8 line. It pins key packages including dompurify, Next.js, and Sentry, and updates Node base image digests. No new user-facing features or breaking changes are introduced.
Full release notesv4.7.14
Oct 22, 2026· 1 day ago
v4.7.14 is a maintenance/hotfix release on the v4.7 line, focused on stability, security, and dependency hygiene rather than new functionality. It fixes permission-sync behavior around inactive cc_pairs and failed group syncs, patches a Pillow security advisory, and pins several frontend and backend dependencies to known-good versions. A CI flake affecting OpenSearch disk-watermark checks is also addressed.
Full release notes