11.0.365
sipcapture/homer11.0.365Oct 14, 2026by adubovikov
Upgrading?
AI Summary
This release updates the Go runtime to version 1.27.2 and focuses on security patches, including blocking specific file reads, rejecting default token placeholders, and pinning a dependency. It also includes a bug fix for VQ-RTCPXR row writing.
Key Highlights
- Updated Go to version 1.27.2
- Security fix: Block sniff_csv and replacement-scan file reads
- Security fix: Reject shipped JWT and node token placeholders
- Security fix: Pin postcss-selector-parser to 7.1.6
- Bug fix: Hold catalog lock and retry when writing VQ-RTCPXR rows
Full Release Notes
## What's Changed * chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/sipcapture/homer/pull/1067 * chore: update Go to 1.27.2 by @github-actions[bot] in https://github.com/sipcapture/homer/pull/1066 * fix(vqrtcp): hold the catalog lock and retry when writing VQ-RTCPXR rows by @jeong-mook in https://github.com/sipcapture/homer/pull/1065 * fix(security): block sniff_csv and replacement-scan file reads (11.0.362) by @adubovikov in https://github.com/sipcapture/homer/pull/1068 * fix(security): parse /vacuum expire_older_than as a duration (11.0.363) by @adubovikov in https://github.com/sipcapture/homer/pull/1069 * chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /src/ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sipcapture/homer/pull/1071 * fix(security): reject shipped JWT and node token placeholders (11.0.364) by @adubovikov in https://github.com/sipcapture/homer/pull/1070 * fix(security): pin postcss-selector-parser 7.1.6 (11.0.365) by @adubovikov in https://github.com/sipcapture/homer/pull/1072 ## New Contributors * @jeong-mook made their first contribution in https://github.com/sipcapture/homer/pull/1065 **Full Changelog**: https://github.com/sipcapture/homer/compare/11.0.361...11.0.365
Related Repositories
ollama/ollama★ 184,209
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
fatedier/frp★ 110,051
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
infiniflow/ragflow★ 92,612
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
gohugoio/hugo★ 90,198
The world’s fastest framework for building websites.
junegunn/fzf★ 83,716
:cherry_blossom: A command-line fuzzy finder