Repository navigation
Bump upstream server to b7d2f366 and version to 0.1.2 - #6
Merged
Merged
Conversation
Updates the standardnotes/server submodule from 31d2b8a0 (2026-04-11) to b7d2f366 (2026-10-05), picking up 39 upstream commits of security fixes (admin/internal endpoint auth, item ownership checks, shared vault authorization, subscription invite handling, WebAuthn challenge replay, PKCE binding) and two auth DB index migrations that run on startup. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
serversubmodule (standardnotes/server) from31d2b8a0(2026-04-11) tob7d2f366(2026-10-05): 39 upstream commits, mostly security fixes0.1.2:0to the version graph, with release notesUpstream changes
authenticators.user_uuidindex, and a unique(name, user_subscription_uuid)index onsubscription_settings(deduplicates first). Both run automatically at startupCompatibility
AUTH_SERVER_ADMIN_KEY/ADMIN_KEY: new upstream var, not needed. The key-protected/adminand/internalcontrollers are only loaded by the standalone auth server, not home-server, so the startup warning is cosmeticU2F_CHALLENGE_MAX_AGE_SECONDS: defaults to 300 in code when unsetdocker_entrypoint.shTesting
npm run checkpassesstandardnotes-server_x86_64.s9pk(v0.1.2:0) and sideloaded over 0.1.1:0 on StartOS: migration0.1.1:0 -> 0.1.2:0completed, server started, client login and sync OK🤖 Generated with Claude Code