Rocket.Chat 8.2.7
Patch release with security hotfixes, permission validation improvements for token generation and room conversion endpoints, and updated engine versions including Node 22.16.0, MongoDB 8.0, and Apps-Engine 1.60.1.
Engine versions
- Node:
22.16.0 - Deno:
1.43.5 - MongoDB:
8.0 - Apps-Engine:
1.60.1
Patch Changes
-
Bump @rocket.chat/meteor version.
-
(#41238 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41247 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41296 by @dionisio-bot) Ensures the
users.CreateTokenendpoint checks for theuser-generate-access-tokenpermission when generating a login token for another user -
(#41288 by @dionisio-bot) Ensures room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room
-
Updated dependencies [20d752e]:
- @rocket.chat/core-typings@8.2.7
- @rocket.chat/model-typings@2.1.5
- @rocket.chat/models@2.1.5
- @rocket.chat/rest-typings@8.2.7
Source: original entry ↗