Starstruk Logo MarkStarstruk

v0.16.0

tokio-rs/axumv0.16.0Jul 9, 2026by Onatcer

AI Summary

This release addresses a critical security vulnerability in the Toggl ZIP Data Importer while introducing performance improvements for large data collections and fixes to the Clockify importer.

Key Highlights

  • Security fix for Path Traversal vulnerability in Toggl ZIP Data Importer
  • Performance optimizations for large data collections via pagination and virtualizers
  • Fixes for Clockify import dropping client columns
  • Filter to include/exclude tags

New Features

  • Filter to include/exclude tags

Full Release Notes

> [!NOTE]
> This release includes security fixes, please make sure to upgrade as soon as possible.

## What's Changed
* The Project-Task-Selector now also shows the Client name
* Add filter to include/exclude tags by @smileBeda in https://github.com/solidtime-io/solidtime/pull/1133
* Performance optimizations for large data collections (projects, clients, tasks) in the index views and dropdown components via pagination and virtualizers by @Onatcer in https://github.com/solidtime-io/solidtime/pull/1140

## Smaller Fixes
* Clockify exports now sometimes drop the client column, so we changed the importer to adopt to that change
* Large collections from imports caused the pagintion to silently drop items when iterating through it because the created_at was used as the only sorting key, it now guarantees stable sorting via the ID as a tiebreaker

## Security
* Thanks to @bharatdevasani for reporting a [Path Traversal issue in Toggl ZIP Data Importer](https://github.com/solidtime-io/solidtime/security/advisories/GHSA-cj49-589g-wp6j), which allowed for arbitrary directory creation & filesystem existence oracle. It was fixed in this version as well. 

## New Contributors
* @smileBeda made their first contribution in https://github.com/solidtime-io/solidtime/pull/1133

**Full Changelog**: https://github.com/solidtime-io/solidtime/compare/v0.15.1...v0.16.0