1.2.3

Two-step sign-in, sign-in with GitHub, and a security update in the web robot engine.

Nothing to do, just update.

Security

  • The web robot engine moves to a patched Node (CVE-2026-111497). Update soon.

New

  • Two-step sign-in with an authenticator app. Each person can turn it on, and admins can require it for everyone.
  • Sign in with GitHub, once you set GITHUB_CLIENT_ID and GITHUB_CLIENT_SECRET in .env.

Update commands

# .env WAISO_VERSION=1.2.3 docker compose pull && docker compose up -d --remove-orphans
Updating an install, including from a hosting panel