v0.17.0

vadimdemedes/inkv0.17.0Jul 23, 2026by korridor

AI Summary

A security-focused release that fixes a critical vulnerability allowing users with stale permissions to edit and delete reassigned time entries. It also includes improvements to email wording, dependency updates, and fixes for background job failures.

Key Highlights

Security fix for time-entry reassignment vulnerability
Improved wording for tracker alert emails
Reduced amount of failed jobs
Dependency updates for GitHub Actions (actions/checkout, setup-node)

Full Release Notes

> [!NOTE]
> This release includes security fixes, please make sure to upgrade as soon as possible.

## What's Changed
* Solidtime time-entry reassignment leaves stale user_id, letting the original owner bulk edit and delete a reassigned member's entry - thanks @ashrexon for the [report](https://github.com/solidtime-io/solidtime/security/advisories/GHSA-jj53-w7j5-jhp7)
* Fix awkward wording for time tracker alert email by @candideu in https://github.com/solidtime-io/solidtime/pull/1156
* Reduce amount of failed jobs by @korridor in https://github.com/solidtime-io/solidtime/pull/1157
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1126
* Bump actions/setup-node from 6 to 7 by @dependabot[bot] in https://github.com/solidtime-io/solidtime/pull/1161
* Extension manifest and dockerignore by @korridor in https://github.com/solidtime-io/solidtime/pull/1134

## New Contributors
* @candideu made their first contribution in https://github.com/solidtime-io/solidtime/pull/1156

**Full Changelog**: https://github.com/solidtime-io/solidtime/compare/v0.16.0...v0.17.0