This release updates Redis-backed caching and request throttling to stay compatible with recent library changes that introduced breaking behavior. The result is a more reliable setup for background jobs and Redis-based features, without needing special workarounds in production.

This release includes a security-related update to address CVE-2026-33658 affecting file uploads via Active Storage. It also resolves compatibility issues with newer Redis connection pooling behavior, helping rate limiting and caching behave more reliably in production environments.

This release includes a targeted security update to address CVE-2026-33306 related to password hashing. It helps reduce the risk of exposure from the underlying vulnerability, with no expected changes to your day-to-day workflow.

This release includes targeted security fixes across key libraries to help protect your app from issues like directory traversal, stored XSS, and SSRF. It also removes an unused rich text editor dependency to reduce exposure to a low-severity XSS risk and keep the frontend bundle leaner.

Repository syncing now stays accurate when GitHub orgs or repositories are renamed, keeping your projects matched to the right owner and repo. Metadata syncs also make fewer GitHub calls and handle authorization and rate-limit errors more gracefully, reducing failed syncs and keeping projects up to date.

Changelog view stats are now migrated when a repo is re-added and entries are moved to a new project. If the same date exists in both the old and new project, the counts are combined so your historical totals stay accurate instead of being split or lost.