v0.17.0

tokio-rs/axumv0.17.0Jul 23, 2026by korridor

AI Summary

This release focuses on security fixes and operational improvements, specifically addressing a critical vulnerability in time-entry reassignment and reducing failed jobs. It also updates dependencies and includes contributions from new community members.

Key Highlights

Security fix for time-entry reassignment allowing bulk edit/delete by original owner (GHSA-jj53-w7j5-jhp7).
Fix awkward wording for time tracker alert emails.
Reduction in the amount of failed jobs.
Bump actions/checkout and setup-node to version 7.

Full Release Notes

> [!NOTE]
> This release includes security fixes, please make sure to upgrade as soon as possible.

## What's Changed
* Solidtime time-entry reassignment leaves stale user_id, letting the original owner bulk edit and delete a reassigned member's entry - thanks @ashrexon for the [report](https://github.com/solidtime-io/solidtime/security/advisories/GHSA-jj53-w7j5-jhp7)
* Fix awkward wording for time tracker alert email by @candideu in https://github.com/solidtime-io/solidtime/pull/1156
* Reduce amount of failed jobs by @korridor in https://github.com/solidtime-io/solidtime/pull/1157
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1126
* Bump actions/setup-node from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1161
* Extension manifest and dockerignore by @korridor in https://github.com/solidtime-io/solidtime/pull/1134

## New Contributors
* @candideu made their first contribution in https://github.com/solidtime-io/solidtime/pull/1156

**Full Changelog**: https://github.com/solidtime-io/solidtime/compare/v0.16.0...v0.17.0