This security release is part of a new AI-driven security research effort at Encore to continuously and proactively find and fix security vulnerabilities. We have no indication these vulnerabilities are being exploited, but we’re sharing this release in the interest of transparency. We recommend all users to upgrade their Encore CLI with encore version update. As this effort continues to ramp up o…
This release contains remediations for two separate security vulnerabilities. We recommend all users to upgrade their Encore CLI with encore version update. If you are self-hosting Encore we recommend you upgrade to v1.57.11 and re-deploy your application. One vulnerability affected the Encore CLI and one with the potential of affecting deployed applications. We have already rolled out a fixed run…
What's Changed go1.26.5 Add docs for external vaults and JIT by @ekerfelt in #2498 core: Add support for splitting secret payload across multiple env vars by @ekerfelt in #2499 go: Add support for splitting the appsecrets across multiple env vars by @ekerfelt in #2500 core: Fix logging field format for GCP by @ekerfelt in #2501 docs: Add section about AWS in JIT/vaults docs by @ekerfelt in #2503 d…
What's Changed runtimes/js: error when converting too deeply nested payloads by @fredr in #2480 Add support for external secret vaults by @ekerfelt in #2479 runtimes/core: avoid exit-time teardown race on shutdown by @fredr in #2482 bump deps by @fredr in #2476 dockerbuild: layer image by @fredr in #2483 runtimes/core: fix raw endpoint status code in traces by @fredr in #2489 docs: reframe overvie…
What's Changed Have notFoundStatus 200 return 304s appropriately by @ekerfelt in #2472 cli/daemon: add trace search filters to get_traces MCP tool by @simon-johansson in #2470 Fix broken email link in migration docs (mail: -> mailto:) by @ivancernja in #2474 update esbuild by @fredr in #2475 docs/go/self-host: fix inverted databases map-key and name descriptions by @harsha-cpp in #2471 infracfg: p…
What's Changed Add docs for et.SQLDBWithSuperuser by @ekerfelt in #2458 Rewrite ts/go LLM instructions with benchmark-tuned content by @simon-johansson in #2457 Revert "cli/daemon/mcp: synchronous Pub/Sub probe + retry-aware call_endpoint" by @simon-johansson in #2460 cli/daemon/mcp: mention trace_id in call_endpoint description by @simon-johansson in #2462 Update readme by @marcuskohlberg in #246…
What's Changed Docs: add bootstrap migration guide for existing databases by @marcuskohlberg in #2443 Add docs for restoring DB from backup by @ekerfelt in #2445 Add documentation for required GCP IAM scopes by @ekerfelt in #2446 Add support for using SQL superuser in et by @ekerfelt in #2452 Docs: generate TS runtime API reference with TypeDoc by @simon-johansson in #2444 cli/daemon/sqldb: fix da…
What's Changed go1.26.3 Full Changelog: v1.57.3...v1.57.4
What's Changed Fix role grant deadlock on db setup by @ekerfelt in #2442 Full Changelog: v1.57.2...v1.57.3
What's Changed Docs: document cloud permissions scoping and self-hosted preview environments by @marcuskohlberg in #2438 Fix DummySocket for latest Node socket types by @amikad09 in #2422 gcp pubsub: allow larger bodies for push subscriptions by @fredr in #2439 Run NewTestDatabase as migrator role by @ekerfelt in #2441 New Contributors @amikad09 made their first contribution in #2422 Full Changelo…
What's Changed Retry grants on deadlocks by @ekerfelt in #2434 Grant encore_services with admin option by @ekerfelt in #2435 Full Changelog: v1.57.0...v1.57.1
What's Changed Upgrade local default PG image to 18 by @ekerfelt in #2426 Add Managing Infrastructure docs page by @marcuskohlberg in #2419 Fix Redis auth self hosting docs by @ekerfelt in #2429 Add docs for the encore_services SQL role by @ekerfelt in #2430 Remove the migrator role by @ekerfelt in #2431 Reintroduce the migrator by @ekerfelt in #2432 Full Changelog: v1.56.10...v1.57.0
What's Changed Fix deploy CLI docs by @ekerfelt in #2425 Add Encore Cloud MCP docs by @ekerfelt in #2427 Add local encore_services role by @ekerfelt in #2418 cli: render OpTracker as plain lines on non-interactive stderr by @dstotijn in #2428 Full Changelog: v1.56.9...v1.56.10