0.7.2

Excalibur 0.7.2 is a patch release fixing security issues and bugs on the app and server.

App

🔒️ Security

• 🔒️ Removed persistence of password in authInfo and the account unlock key (AUK) in vaultInfo

• 🔒️ Stopped persisting login session and vault key material in localStorage

  • A fresh login is now required on every app launch or page reload

🔄 Changes

• 🔒️ Prompt user for current password when updating account details

🐛 Bug Fixes

• 🐛 Fixed a previously necessary but janky reload of the page when a new user signs up
• 🐛 Fixed an issue where a failed update check could throw an error

Server

🐛 Bug Fixes

• 🐛 Fixed the database engine not being disposed after use
  • This leaked the DuckDB file lock and caused an IO error when a worker/reload subprocess tried to access the database

⬆️ Dependencies

• ➖ Removed colorama dependency
• ⬆️ Updated alembic from 1.18.4 to 1.18.5 (#102)
• ⬆️ Updated typer from 0.26.7 to 0.26.8 (#99)
• ⬆️ Updated uvicorn from 0.49.0 to 0.51.0 (#100)
• ⬆️ Updated httpx2 test dependency from 2.4.0 to 2.5.0 (#97)