↑ ↓ to navigate
↵ to select
esc to close
v0.8.2 Security

v0.8.2 - Security patches and API consistency

Patched a CVE in Avo and shipped a broad set of gem/npm security upgrades alongside API and Liquid fixes

Security

  • Bumped Avo to 3.32.1, patching CVE-2026-55518
  • Upgraded Ruby gems and npm dependencies to patch several security vulnerabilities

Changes

  • Unified API v1 and Liquiditor client response shapes
  • Hardened CMS upsert validations
  • Standardized on Caddy route targeting by @id instead of positional index

Fixes

  • Fixed the {% query %} tag's entity filter, position sort, and a crash when the context page is an entry hash
  • Fixed the paginate tag crashing when a page collection entry is in context
  • Fixed image field values not accepting AccountAsset in entries_save
  • Fixed BlueprintValue not being destroyed (and text values not persisting) when a field type changes
  • Fixed navigation children not being imported in the Liquiditor YAML-to-SQLite import
  • Fixed a Liquiditor entity ref import and trailing-slash routing bug
  • Fixed a pi session log sync race condition