v0.17.0

pola-rs/polarsv0.17.0Jul 23, 2026by korridor

AI Summary

This release includes critical security fixes regarding time-entry reassignment bugs that allowed bulk editing. It also improves the time tracker alert email wording and reduces the amount of failed jobs in the system.

Key Highlights

  • Security fix for time-entry reassignment leaving stale user_id.
  • Fixed awkward wording for time tracker alert email.
  • Reduced amount of failed jobs.

Full Release Notes

> [!NOTE]
> This release includes security fixes, please make sure to upgrade as soon as possible.

## What's Changed
* Solidtime time-entry reassignment leaves stale user_id, letting the original owner bulk edit and delete a reassigned member's entry - thanks @ashrexon for the [report](https://github.com/solidtime-io/solidtime/security/advisories/GHSA-jj53-w7j5-jhp7)
* Fix awkward wording for time tracker alert email by @candideu in https://github.com/solidtime-io/solidtime/pull/1156
* Reduce amount of failed jobs by @korridor in https://github.com/solidtime-io/solidtime/pull/1157
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1126
* Bump actions/setup-node from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1161
* Extension manifest and dockerignore by @korridor in https://github.com/solidtime-io/solidtime/pull/1134

## New Contributors
* @candideu made their first contribution in https://github.com/solidtime-io/solidtime/pull/1156

**Full Changelog**: https://github.com/solidtime-io/solidtime/compare/v0.16.0...v0.17.0