Rocket.Chat 8.6.1
Patch release including security hotfixes, permission checking improvements for token generation and room operations, and a TypeScript type correction for FederationLookup in apps. Updates core dependencies and engine versions.
Engine versions
- Node:
22.22.3 - Deno:
2.3.1 - MongoDB:
8.0 - Apps-Engine:
1.64.1
Patch Changes
-
Bump @rocket.chat/meteor version.
-
Bump @rocket.chat/meteor version.
-
(#41234 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41243 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41308 by @dionisio-bot) Fixes wrong FederationLookup type assigned to IUser in apps. The correct data is there, but the type does not represent it.
-
(#41292 by @dionisio-bot) Ensures the
users.CreateTokenendpoint checks for theuser-generate-access-tokenpermission when generating a login token for another user -
(#41276 by @dionisio-bot) Ensures room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room
-
Updated dependencies [89ab75c, c86d933]:
- @rocket.chat/core-typings@8.6.1
- @rocket.chat/model-typings@2.3.2
- @rocket.chat/models@2.3.2
- @rocket.chat/apps-engine@1.64.1
- @rocket.chat/rest-typings@8.6.1
Source: original entry ↗