Version 0.9.124

• Harden event parameter validation and plugin handling, so only plugin-defined params may be included in events and jobs.

Version 0.9.123

• Replace old bcrypt-node with bcryptjs. Fixes #984.

Version 0.9.122

• Bump shell-quote to v1.9.0 for vuln fixes.

Version 0.9.121

• Tighten event launch option handling
• Bump pixl-mail to v1.1.9 for upstream vuln fix in nodemailer
• Bump ws override to v8.21.0 for vuln fix

Version 0.9.120

• Bump sanitize-html to v2.17.5 for vuln fix.
• job.js: Fix pending queue and log watcher edge cases. Fixes #982.

Version 0.9.119

• Bump pixl-request to v2.6.6 for potential stream write leak fixes.
• Enhance security by encoding user-provided text in activity log descriptions
• Bug fix: Job retry code was leaking an old process handle object.

Version 0.9.118

• Bump shell-quote to v1.8.4 for vuln fixes.

Version 0.9.117

• Bump sanitize-html to v2.17.4 for vuln fix
• Bump socket.io to v4.8.3 for vuln fix

Version 0.9.116

• Rebuild package-lock.json to address serveral upstream vulns.

Version 0.9.115

• Fix issue with export/import when file path includes spaces. Fixes #972.