BugPin v1.1.1
This patch release fixes server-side screenshot upload limit handling, improves the Project Settings dialog layout, and updates Admin Console test tooling for a critical Vitest security advisory. There are no database migrations and no widget embed update is required.
Highlights
- Project-specific screenshot size overrides are now respected by the server when widget submissions are processed.
- The Project Settings dialog keeps a stable size when switching between vertical tabs.
- Admin Console test tooling now uses the patched Vitest 4.1.8 release line.
Fixes
Server-side screenshot upload limits
Widget submissions now respect each project's custom screenshot upload size when they reach the server. Previously, the server-side size check read only the global screenshot limit, so projects with a higher custom limit could still be rejected by the global 10 MB cap.
UI Improvements
Project Settings dialog
The Project Settings dialog no longer resizes when switching between vertical tabs. The dialog is locked to a single height, and the content area scrolls when a tab's content exceeds the available space.
Security
- Admin Console test tooling now uses
vitestand@vitest/coverage-v84.1.8, resolving the critical Vitest vulnerability affecting versions before 4.1.0 (CVE-2026-47429 / GHSA-5xrq-8626-4rwp).
This is a development/test tooling dependency, not a production runtime dependency, but it is included in the release so source installs and CI environments use the patched version.
Maintenance
- Updated the Admin Console Vitest configuration for Vitest 4.
- Adjusted shared jsdom
ResizeObserverandIntersectionObservermocks so the admin typecheck, tests, and production build continue to pass with the patched test runner.
How to Upgrade
Docker
docker compose pull && docker compose up -d
No database migration is required for this release.
Bun
git pull
bun install
bun run build
bun run start
Embedded widget
No widget update is required for this release. Sites using either the hosted <script src=".../widget.js"> embed or the npm package can keep their current widget build.