• v1.98.0 3e19ebe85a

    fix: security hardening, Prisma singleton, tsconfig cleanup

    mARTin-B78 released this 2026-04-20 19:52:47 +02:00 | 64 commits to main since this release

    • tsconfig: remove deprecated downlevelIteration (es2017 has native iterators),
      change moduleResolution from node to bundler
    • auth: set allowDangerousEmailAccountLinking=false on all OAuth providers,
      restrict debug mode to development only
    • prisma: replace new PrismaClient() with singleton import in 10 API routes
      to prevent connection pool exhaustion
    • goal API: validate user-supplied quote URLs to block SSRF (private IPs,
      non-http(s) schemes)
    • email: guard DEV verification/reset link console.logs behind NODE_ENV check

    v1.98.0

    Downloads