chore: publish 1.7.0+4.7.0 release

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: lukevella/rallly:4.5.6
+    image: lukevella/rallly:4.7.0
     hostname: 0.0.0.0
     networks:
       - proxy
@@ -45,7 +45,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=1.5.6+4.5.6"
+        - "coop-cloud.${STACK_NAME}.version=1.7.0+4.7.0"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
     healthcheck:
       test: "bash -c 'printf \"GET / HTTP/1.1\n\n\" > /dev/tcp/127.0.0.1/3000; exit $$?;'"

release/1.5.10+4.5.10

@@ -0,0 +1 @@
+We've updated Next.js and React to fix two additional vulnerabilities (CVE-2025-55183, CVE-2025-55184) that were discovered while security researchers examined the patches for React2Shell.

release/1.5.11+4.5.11

@@ -0,0 +1 @@
+The React team has announced that the fix for the Denial of Service vulnerability (CVE-2025-55184) that we patched in v4.5.10 was incomplete. A further patch is required, which has been disclosed as CVE-2025-67779 (High Severity).

release/1.5.13+4.5.13

@@ -0,0 +1 @@
+This release contains updates to upstream dependencies that include important security fixes. Please update to this version as soon as possible.

release/1.5.14+4.5.14

@@ -0,0 +1 @@
+Fixed an issue where anonymous users were incorrectly included in the total user count and displayed in the control panel.

release/1.5.7+4.5.7

@@ -0,0 +1 @@
+This is a critical security update that upgrades Next.js to address CVE-2025-66478. We strongly recommend all users upgrade to this version immediately.

release/1.5.8+4.5.8

@@ -0,0 +1 @@
+This release includes updates to dependencies, adds missing translations and fixes a bug where emails for scheduled events are not delivered to a participant's email address.

release/1.5.9+4.5.9

@@ -0,0 +1 @@
+This release fixes an issue where participants are not able to edit their response using the link they receive in their confirmation email when their session is expired or they are not logged in.

release/1.6.0+4.6.0

@@ -0,0 +1 @@
+Full dark mode support across the entire application. Users can switch between light, dark, or system themes from their preferences.

release/1.6.1+4.6.1

@@ -0,0 +1 @@
+This patch fixes an issue where the edit link that is emailed to participants would expire, preventing them from making changes to their response.

release/1.6.3+4.6.2

@@ -0,0 +1 @@
+This patch fixes a client-side crash that occurred when accessing the profile and general settings pages.

release/1.7.0+4.7.0

@@ -0,0 +1 @@
+This release upgrades from Prisma v6 to v7, which has stricter TLS/SSL certificate validation.