LoginSign Up
← Back to all sparks
C

Cronicle

INFRA · APIS
Velocity5.0

Distributed task scheduler and job runner with web based control panel

cronicle.net ↗

Cronicle keeps patching vulnerable dependencies, two more bumps in three days.

job schedulermaintenancesecuritydependenciesself-hosted
◆Current state
Cronicle 0.9.138 and 0.9.139 each bump one dependency for upstream vulnerability fixes: sanitize-html, then pixl-mail for nodemailer. That makes six dependency-driven releases in under two months. The last functional changes were privilege filtering on active jobs and HTTP status retention in August and September.
◆Where it's heading
The 0.9.x line is in maintenance: security-driven dependency bumps and occasional correctness fixes, released as soon as an upstream advisory lands. Nothing in the entries hints at new scheduling features.
◆Prediction
Expect more single-dependency 0.9.x releases following upstream advisories, especially for nodemailer and other mail and HTML dependencies.

◆Recent moves

  1. 3d ago

    Cronicle 0.9.139 bumps pixl-mail for nodemailer fixes

    Bumps pixl-mail for nodemailer vulnerability fixes, the second nodemailer-driven release since September. Pure upkeep.

    View source ↗
  2. 5d ago

    Cronicle 0.9.138 bumps sanitize-html for vuln fixes

    A single sanitize-html bump for vulnerability fixes, with no functional change.

    View source ↗
  3. 12d ago

    pixl-server-web bump fixes issue #995

    A single dependency bump to pixl-server-web 3.0.6 that also resolves issue #995. Routine upkeep in a maintenance-mode line.

    View source ↗
  4. 15d ago

    Fixes chained-event failure emails, bumps shell-quote

    Another shell-quote bump for vulnerability fixes, plus corrected title, link and notes on chained-event failure emails. The two halves of this release, dependency hygiene and chained-event fixes, are the project's recurring themes.

    View source ↗
  5. 27d ago

    Dependency bumps for basic-ftp, moment and nodemailer vulns

    Three dependency bumps for upstream vulnerabilities, with no functional change. This is typical of the 0.9.x maintenance cadence.

    View source ↗
  6. 1mo ago

    Fix: disabled chained events no longer run

    Disabled chained events were still firing; now they don't. It is a correctness fix that matters to anyone relying on the disable switch, and it continues the run of chained-event repairs.

    View source ↗