From 2a49f87403a7e1db06bd40b27b44fc47df88a8a6 Mon Sep 17 00:00:00 2001 From: "Alexander L." Date: Fri, 20 Feb 2026 11:48:56 +0100 Subject: [PATCH] Update octoprint to 1.11.7 (#4834) --- octoprint/docker-compose.yml | 2 +- octoprint/umbrel-app.yml | 20 ++++++++++---------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/octoprint/docker-compose.yml b/octoprint/docker-compose.yml index a367bdbc..f3fbbdfe 100644 --- a/octoprint/docker-compose.yml +++ b/octoprint/docker-compose.yml @@ -8,7 +8,7 @@ services: PROXY_AUTH_ADD: "false" web: - image: octoprint/octoprint:1.11.6@sha256:a31f097fc81865472bfebea73f8c51a934092f9d7169a0ac02bb00066f74cbe8 + image: octoprint/octoprint:1.11.7@sha256:49bea4ebfd0cefa9289f058574e7eda6d2de201f1b74309e0c10019e5ec58f04 privileged: true volumes: - ${APP_DATA_DIR}/data:/octoprint diff --git a/octoprint/umbrel-app.yml b/octoprint/umbrel-app.yml index 1af8d4ec..4d16845f 100644 --- a/octoprint/umbrel-app.yml +++ b/octoprint/umbrel-app.yml @@ -2,7 +2,7 @@ manifestVersion: 1 id: octoprint category: files name: OctoPrint -version: "1.11.6" +version: "1.11.7" tagline: A snappy web interface for your 3D printer description: >- OctoPrint provides a snappy web interface for controlling consumer 3D printers. @@ -17,15 +17,15 @@ support: https://community.octoprint.org/ port: 5003 submitter: mateosilguero releaseNotes: >- - 🚨 This release includes an important security fix that addresses a timing side-channel vulnerability in API key authentication. Update is strongly recommended. - - - Key highlights in this release: - - Fixed timing attack vulnerability that could allow API key extraction over the network - - Added support for resetting yearly stats in the Achievements Plugin - - Fixed settings preprocessors when handling nested values - - Fixed year change handling in stats collection - - Improved multi-select and shift-select behavior in Upload Manager Plugin + Key bug fixes in this release: + - Added custom parser for Prusa Slicer's webview User Agent, fixing a UI loading error + - Fixed active position autoreporting using the correct capability + - Fixed checkboxes not showing for unrendered timelapses + - Fixed missing subgroups response behavior in access management API + - Fixed session cookies not being suppressed when login mechanism is API key + - Fixed timezone conversion in Last-Modified header + - Fixed help and output for user activate/deactivate CLI commands + - Fixed Plugin Manager cleanup tab always appearing empty Full release notes are found at https://github.com/OctoPrint/OctoPrint/releases