2.18.0
Released
Fixes
Kept task details and investigation history inside their cards when references or responses contained long unbroken text, while preserving access to task actions. (#610)
Closed the quest editor after a successful update and displayed a dismissible success notification, while keeping failed edits open for correction. (#606)
Requested Markdown investigation responses and displayed full answers with spaced paragraphs, headings, lists, links, code blocks, and tables. (#607)
Security
Kept quest and task deadlines private to collaborators through column permissions, explicit public projections, and access checks before deadline validation. (#570)
Blocked investigation image probes to non-public and special-purpose destinations, validated every DNS answer and pinned connections to prevent DNS rebinding. Bound DNS and HEAD work to one deadline with cancellation of outstanding DNS queries. Refused redirects and unresolvable references before investigation creation or credit charging, while retaining inconclusive content-type handling for validated destinations. (#611)
Technical changes· 1 entry for database, tooling, CI, tests and docs
CI/CD
Automated release tags from root package version changes on
main, backfilled missing historical tags at their original release commits, and preserved existing tags across reruns without triggering historical deployments. (#604)