September 1st, 2026

0.9.27 Release: Faster health checks, safer previews, cleaner disk

No new actions this time. This release makes Anaphora safer to run and lighter on the host.

Security

  • All critical and high dependency vulnerabilities are fixed, in the app and in the build tools. The audit now reports zero.

  • Untrusted HTML in job variables can no longer run on the app origin. Report previews show captured content in isolation.

Reliability

  • The health endpoint answers in milliseconds. Before, it could take 8 seconds when the run history was large.

  • The hourly clean-up no longer reads the full run history into memory.

  • The database closes correctly when the container stops. A bad restart can no longer corrupt the state.

  • Zombie headless-browser processes are removed. Long-running containers stay healthy.

  • Deleted runs now release their report files. New jobs get a default run retention of 6 months. Jobs made before this release, and jobs made from the built-in Kibana templates, keep “never expire” until you set it. Change it per job: General tab, Housekeeping, Run Expire Time. The hourly sweep applies the change.

Platform

  • Next.js 16 and React 19.

  • A new test suite guards report rendering, the upgrade path, exports, health monitoring, and the unsubscribe flow on each change.