↑ ↓ to navigate
↵ to select
esc to close
v0.12.0 Bugfix

v0.12.0 - Globals, SEO and asset upload fixes

Fixes globals created with values in one call, SEO title/description fallbacks on entries, and asset uploads that silently did nothing when a file already existed.

Fixes

  • globals_save: creating a new global with both fields and field_values in the same call now stores the values. Previously the values were silently dropped whenever the call also created the blueprint.
  • seo_title and seo_description no longer silently fall back to the entry title (or blank) when more than one stored value exists for the field; the most recently written value wins.
  • REST POST /api/v1/assets: uploading a file whose path and filename already exist now returns 409 Conflict, or replaces the file when replace: true is sent, matching the assets_upload MCP tool. Previously it returned 201 without writing anything. PATCH now syncs file metadata correctly.

Security

  • Patched the json gem (CVE-2026-71847, parser use-after-free) and DOMPurify (GHSA-55q2-fjhq-7xh7, XSS in the rich-text editor's sanitizer).

Changes

  • Routine dependency updates (Avo 4.1, MCP SDK 1.2, Stripe 19.5, Pay 11.7, Solid Queue 1.6).