11.0.365

sipcapture/homer11.0.365Oct 14, 2026by adubovikov

Upgrading?

AI Summary

This release updates the Go runtime to version 1.27.2 and focuses on security patches, including blocking specific file reads, rejecting default token placeholders, and pinning a dependency. It also includes a bug fix for VQ-RTCPXR row writing.

Key Highlights

  • Updated Go to version 1.27.2
  • Security fix: Block sniff_csv and replacement-scan file reads
  • Security fix: Reject shipped JWT and node token placeholders
  • Security fix: Pin postcss-selector-parser to 7.1.6
  • Bug fix: Hold catalog lock and retry when writing VQ-RTCPXR rows

Full Release Notes

## What's Changed
* chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/sipcapture/homer/pull/1067
* chore: update Go to 1.27.2 by @github-actions[bot] in https://github.com/sipcapture/homer/pull/1066
* fix(vqrtcp): hold the catalog lock and retry when writing VQ-RTCPXR rows by @jeong-mook in https://github.com/sipcapture/homer/pull/1065
* fix(security): block sniff_csv and replacement-scan file reads (11.0.362) by @adubovikov in https://github.com/sipcapture/homer/pull/1068
* fix(security): parse /vacuum expire_older_than as a duration (11.0.363) by @adubovikov in https://github.com/sipcapture/homer/pull/1069
* chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /src/ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/sipcapture/homer/pull/1071
* fix(security): reject shipped JWT and node token placeholders (11.0.364) by @adubovikov in https://github.com/sipcapture/homer/pull/1070
* fix(security): pin postcss-selector-parser 7.1.6 (11.0.365) by @adubovikov in https://github.com/sipcapture/homer/pull/1072

## New Contributors
* @jeong-mook made their first contribution in https://github.com/sipcapture/homer/pull/1065

**Full Changelog**: https://github.com/sipcapture/homer/compare/11.0.361...11.0.365

Related Repositories