- Fix wrong FederationLookup type assigned to IUser in apps
- Ensure the users.CreateToken endpoint checks for the user-generate-access-token permission when generating a login token for another user
- Ensure room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room
- Apply security hotfix
- Apply security hotfix
Engine versions
- Node:
22.22.3 - Deno:
2.3.1 - MongoDB:
8.0 - Apps-Engine:
1.64.1
Patch Changes
-
Bump @rocket.chat/meteor version.
-
Bump @rocket.chat/meteor version.
-
(#41234 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41243 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41308 by @dionisio-bot) Fixes wrong FederationLookup type assigned to IUser in apps. The correct data is there, but the type does not represent it.
-
(#41292 by @dionisio-bot) Ensures the
users.CreateTokenendpoint checks for theuser-generate-access-tokenpermission when generating a login token for another user -
(#41276 by @dionisio-bot) Ensures room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room
-
- @rocket.chat/core-typings@8.6.1
- @rocket.chat/model-typings@2.3.2
- @rocket.chat/models@2.3.2
- @rocket.chat/apps-engine@1.64.1
- @rocket.chat/rest-typings@8.6.1